CVE-2014-2497
Beschrijving
The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.
Vendors
Affected products
References
- advisories.mageia.org
- lists.apple.com
- lists.opensuse.org
- lists.opensuse.org
- rhn.redhat.com
- rhn.redhat.com
- rhn.redhat.com
- rhn.redhat.com
- secunia.com
- secunia.com
- secunia.com
- secunia.com
- www.debian.org
- www.mandriva.com
- www.oracle.com
- www.securityfocus.com
- www.ubuntu.com
- bugs.php.net
- bugzilla.redhat.com
- security.gentoo.org