The host is running PHP and is prone to Memory Information Disclosure vulnerability.

Successful exploitation could let the attacker read the contents of arbitrary memory locations through a crafted value for an indexed image. Impact Level: Application

Upgrade to PHP version 5.2.9 or later. For updates refer to http://www.php.net/

The flaw is due to improper validation of bgd_color or clrBack argument in imageRotate function.

PHP version 5.x to 5.2.8 on all running platform.

• http://downloads.securityfocus.com/vulnerabilities/exploits/33002-2.php
• http://downloads.securityfocus.com/vulnerabilities/exploits/33002.php
• http://securitytracker.com/alerts/2008/Dec/1021494.html

---

Updated on 2015-03-25