Description

The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.

Remediation

References

CVE-2014-2497

Related Vulnerabilities

WordPress Plugin CigiCigi Post Guest Cross-Site Scripting (1.0.5)

WebLogic CVE-2023-21964 Vulnerability (CVE-2023-21964)

MySQL CVE-2021-2230 Vulnerability (CVE-2021-2230)

Atlassian Confluence Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-3396)

Apache Tomcat Improper Access Control Vulnerability (CVE-2014-7810)

Severity

Medium

Classification

CVE-2014-2497

Tags

Missing Update Known Vulnerabilities