Summary
This host is installed with PHP and is prone to multiple vulnerabilities.
Impact
Successful exploitation will allow remote attackers to conduct denial of service, gain sensitive information and have some other unspecified impacts.
Impact Level: System/Application
Solution
Upgrade to PHP version 5.5.9 or later. For updates refer to http://php.net
Insight
Multiple flaws exists due to,
- Integer overflow in the 'gdImageCrop' function within ext/gd/gd.c script.
- Improper data types check as using string or array data type in place of a numeric data type within ext/gd/gd.c script.
- Multiple integer signedness errors in the 'gdImageCrop' function within ext/gd/gd.c script.
- Some NULL pointer dereference errors related to the 'imagecrop' function implementation.
Affected
PHP version 5.5.x before 5.5.9
Detection
Get the installed version of PHP with the help of detect NVT and check the version is vulnerable or not.
References
Severity
Classification
-
CVE CVE-2013-7226, CVE-2013-7327, CVE-2013-7328, CVE-2014-2020 -
CVSS Base Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
Related Vulnerabilities