CVE

Id
94388  
CVE No.
CVE-2016-7568  
Status
Candidate  
Description
Integer overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted imagewebp and imagedestroy calls.  
Phase
Assigned (20160909)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
796356 94388 CVE-2016-7568 CONFIRM:https://bugs.php.net/bug.php?id=73003  View
796357 94388 CVE-2016-7568 CONFIRM:https://github.com/libgd/libgd/commit/40bec0f38f50e8510f5bb71a82f516d46facde03  View
796358 94388 CVE-2016-7568 CONFIRM:https://github.com/libgd/libgd/issues/308  View
796359 94388 CVE-2016-7568 CONFIRM:https://github.com/php/php-src/commit/c18263e0e0769faee96a5d0ee04b750c442783c6  View
796360 94388 CVE-2016-7568 BID:93184  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5474 JVNDB-2016-006247 Adobe Flash Player の MovieClip クラスにおける任意のコードを実行される脆弱性 Adobe Flash Player の MovieClip クラスには、オブジェクトに対する変換処理の際、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2016-7881 94388 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006247.html  View