QwikSec

Security Database

CVE

CWE

Training

CVE-2013-7226

Published: Feb 18, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an imagecrop function call with a large x dimension value, leading to a heap-based buffer overflow.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_SECUNIA

http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=8f4a5373bb71590352fd934028d6dde5bc18530b

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

https://bugzilla.redhat.com/show_bug.cgi?id=1065108

x_refsource_CONFIRM

https://github.com/php/php-src/commit/2938329ce19cb8c4197dec146c3ec887c6f61d01

x_refsource_CONFIRM

vendor-advisory

x_refsource_MANDRIVA

http://www.php.net/ChangeLog-5.php

x_refsource_CONFIRM

vdb-entry

x_refsource_SECTRACK

php-cve20137226-bo(91099)

vdb-entry

x_refsource_XF

vendor-advisory

x_refsource_UBUNTU

https://bugs.php.net/bug.php?id=66356

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.