QwikSec

Security Database

CVE

CWE

Training

CVE-2007-3996

Published: Sep 4, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_SECUNIA

vendor-advisory

x_refsource_GENTOO

vendor-advisory

x_refsource_DEBIAN

vendor-advisory

x_refsource_REDHAT

php-gdimagecreate-bo(36382)

vdb-entry

x_refsource_XF

oval:org.mitre.oval:def:11147

vdb-entry

signature

x_refsource_OVAL

SUSE-SA:2008:004

vendor-advisory

x_refsource_SUSE

third-party-advisory

x_refsource_SECUNIA

FEDORA-2007-709

vendor-advisory

x_refsource_FEDORA

http://bugs.gentoo.org/show_bug.cgi?id=201546

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

third-party-advisory

x_refsource_SECUNIA

vendor-advisory

x_refsource_GENTOO

third-party-advisory

x_refsource_SECUNIA

http://www.php.net/ChangeLog-5.php#5.2.4

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

vendor-advisory

x_refsource_TRUSTIX

vendor-advisory

x_refsource_REDHAT

http://secweb.se/en/advisories/php-imagecopyresized-integer-overflow/

x_refsource_MISC

https://issues.rpath.com/browse/RPL-1693

x_refsource_CONFIRM

http://secweb.se/en/advisories/php-imagecreatetruecolor-integer-overflow/

x_refsource_MISC

https://issues.rpath.com/browse/RPL-1702

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm

x_refsource_CONFIRM

vendor-advisory

x_refsource_UBUNTU

third-party-advisory

x_refsource_SECUNIA

third-party-advisory

x_refsource_SREASON

third-party-advisory

x_refsource_SECUNIA

third-party-advisory

x_refsource_SECUNIA

vendor-advisory

x_refsource_MANDRIVA

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_VUPEN

http://www.php.net/releases/5_2_4.php

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

third-party-advisory

x_refsource_SECUNIA

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_REDHAT

third-party-advisory

x_refsource_SECUNIA

php-gdimagecopyresized-bo(36383)

vdb-entry

x_refsource_XF

third-party-advisory

x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.