CVE

Id
87673  
CVE No.
CVE-2016-10166  
Status
Candidate  
Description
Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable.  
Phase
Assigned (20170128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
764687 87673 CVE-2016-10166 MLIST:[oss-security] 20170126 CVE Requests: libgd: potential unsigned onderflow, denial-of-service in gdImageCreateFromGd2Ctx and signed overflow in gd_io.c  View
764688 87673 CVE-2016-10166 URL:http://www.openwall.com/lists/oss-security/2017/01/26/1  View
764689 87673 CVE-2016-10166 MLIST:[oss-security] 20170128 Re: CVE Requests: libgd: potential unsigned onderflow, denial-of-service in gdImageCreateFromGd2Ctx and signed overflow in gd_io.c  View
764690 87673 CVE-2016-10166 URL:http://www.openwall.com/lists/oss-security/2017/01/28/6  View
764691 87673 CVE-2016-10166 CONFIRM:http://libgd.github.io/release-2.2.4.html  View
764692 87673 CVE-2016-10166 CONFIRM:https://github.com/libgd/libgd/commit/60bfb401ad5a4a8ae995dcd36372fe15c71e1a35  View
764693 87673 CVE-2016-10166 BID:95869  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34 JVNDB-2016-000036 Aterm WG300HP におけるクロスサイトリクエストフォージェリの脆弱性 日本電気株式会社が提供する Aterm WG300HP には、クロスサイトリクエストフォージェリ (CWE-352) の脆弱性が存在します。 CVE-2016-1167 87673 2.6 4.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000036.html  View