Description

Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.

Remediation

References

CVE-2007-1001

Related Vulnerabilities

Drupal Core 4.7.x Arbitrary Code Execution (4.7.0 - 4.7.5)

PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-17082)

WordPress Plugin Donation with Goals and Paypal IPN by NonprofitCMS.org 'exporttocsv.php' SQL Injection (1.0)

ProjectSend Incorrect Authorization Vulnerability (CVE-2021-40884)

ZenCart Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2021-3291)

Severity

Medium

Classification

CVE-2007-1001

Tags

Missing Update Known Vulnerabilities