NetSight
IP …
medium5.0Public exploit code

CVE-2008-5498

Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations vi…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.

Affected products

VendorProductAffected versions
PhpPhp
through 5.2.8
Versions 5, 5.0, 5.0.0, 5.0.1, 5.0.2

Weakness classification

CWE-200

References