CVE-2007-3996
EPSS 15.1%發布日:2007/9/4修改日:2026/4/28
描述
Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.
受影響套件(3)
- Debian/libgd2from 0, < 2.0.35.dfsg-1
- Debian/libwmffrom 0
- Debian/racketfrom 0, < 5.0.2-1