PHP :: Bug #30718 :: the libgd shipped with PHP needs to be updated

Bug #30718	the libgd shipped with PHP needs to be updated
Submitted:	2004-11-08 13:06 UTC	Modified:	2004-11-08 13:09 UTC
From:	hunter at comsys dot com dot ua	Assigned:
Status:	Not a bug	Package:	GD related
PHP Version:	Irrelevant	OS:	any
Private report:	No	CVE-ID:	None

View Add Comment Developer Edit

[2004-11-08 13:06 UTC] hunter at comsys dot com dot ua

Description:
------------
Integer overflow in GD Graphics Library (libgd) 2.0.28, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function. 

The libgd library shipped with PHP is vulnerable.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports

[2004-11-08 13:09 UTC] derick@php.net

This is not true. The integer overflow is not possible in PHP as we use a different function to allocate memory which checks for those overflows.

	php.net \| support \| documentation \| report a bug \| advanced search \| search howto \| statistics \| random bug \| login
go to bug id or search bugs for


Copyright © 2001-2024 The PHP Group All rights reserved.	Last updated: Mon Apr 29 02:01:29 2024 UTC