CVE

Id
87675  
CVE No.
CVE-2016-10168  
Status
Candidate  
Description
Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image.  
Phase
Assigned (20170128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
764701 87675 CVE-2016-10168 MLIST:[oss-security] 20170126 CVE Requests: libgd: potential unsigned onderflow, denial-of-service in gdImageCreateFromGd2Ctx and signed overflow in gd_io.c  View
764702 87675 CVE-2016-10168 URL:http://www.openwall.com/lists/oss-security/2017/01/26/1  View
764703 87675 CVE-2016-10168 MLIST:[oss-security] 20170128 Re: CVE Requests: libgd: potential unsigned onderflow, denial-of-service in gdImageCreateFromGd2Ctx and signed overflow in gd_io.c  View
764704 87675 CVE-2016-10168 URL:http://www.openwall.com/lists/oss-security/2017/01/28/6  View
764705 87675 CVE-2016-10168 CONFIRM:http://libgd.github.io/release-2.2.4.html  View
764706 87675 CVE-2016-10168 CONFIRM:https://github.com/libgd/libgd/commit/69d2fd2c597ffc0c217de1238b9bf4d4bceba8e6  View
764707 87675 CVE-2016-10168 CONFIRM:https://github.com/libgd/libgd/issues/354  View
764708 87675 CVE-2016-10168 BID:95869  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42 JVNDB-2016-000044 baserCMS 用プラグイン「ケースブックプラグイン」におけるクロスサイトスクリプティングの脆弱性 株式会社ヒニアラタが提供する baserCMS 用プラグイン「ケースブックプラグイン」には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-1169 87675 4 6.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000044.html  View