NetSight
IP …
critical9.1

CVE-2016-1903

The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attacke…

Impact

The gdImageRotateInterpolated function in ext/gd/libgd/gd_interpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a large bgd_color argument to the imagerotate function.

Affected products

VendorProductAffected versions
PhpPhp
through 5.5.30
Versions 5.6.0, 5.6.1, 5.6.2, 5.6.3, 5.6.4

Weakness classification

CWE-119CWE-200

References