Description

Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Remediation

References

CVE-2008-3658

Related Vulnerabilities

PHP Other Vulnerability (CVE-2002-1783)

WordPress Plugin WP Online Store Local File Include and Multiple File Disclosure Vulnerabilities (1.3.1)

phpBB URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2015-3880)

WebLogic CVE-2017-10178 Vulnerability (CVE-2017-10178)

Django Other Vulnerability (CVE-2009-3695)

Severity

High

Classification

CVE-2008-3658 CWE-119

Tags

Missing Update Known Vulnerabilities