Description
Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.
Remediation
References
Related Vulnerabilities
Artifactory Insufficiently Protected Credentials Vulnerability (CVE-2018-1000424)
WordPress Plugin Wallable-Social Networking Arbitrary File Upload (1.1)
Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2022-42130)
WordPress Plugin Correos Woocommerce Arbitrary File Download (1.3.0.0)
WordPress Plugin VIDEO GALLERY 'upload1.php' Arbitrary File Upload (1.3)