NetSight
IP …
medium5.0

CVE-2014-9709

The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of…

Impact

The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.

Affected products

VendorProductAffected versions
PhpPhp
from 5.4.0 before 5.4.40
from 5.5.0 before 5.5.21
from 5.6.0 before 5.6.5
OpensuseOpensuse
Versions 13.1, 13.2
LibgdLibgd
through 2.1.1
DebianDebian Linux
Versions 7.0, 8.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10, 16.04

Weakness classification

CWE-119

References