NetSight
IP …
medium4.3

CVE-2014-2497

The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer de…

Impact

The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.

Affected products

VendorProductAffected versions
PhpPhp
before 5.4.32
from 5.5.0 before 5.5.16
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10, 16.04
SuseLinux Enterprise Server
Version 11
SuseLinux Enterprise Software Development Kit
Version 11
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Eus
Versions 6.5, 7.3, 7.4, 7.5, 7.6, 7.7
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 6.5, 7.3, 7.6
RedhatEnterprise Linux Server Tus
Versions 6.5, 7.3, 7.6, 7.7
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
DebianDebian Linux
Versions 7.0, 8.0
OracleSolaris
Version 11.2

Weakness classification

CWE-476

References