NVD

Id
18954  
Name
CVE-2016-3074  
Description
Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-04-26  
Modified Date
2016-12-02  
Seq
2016-3074  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
104998 18954 CVE-2016-3074 FEDORA-2016-5f91f43826  View
104999 18954 CVE-2016-3074 FEDORA-2016-0c57b12c7b  View
105000 18954 CVE-2016-3074 openSUSE-SU-2016:1274  View
105001 18954 CVE-2016-3074 http://packetstormsecurity.com/files/136757/libgd-2.1.1-Signedness.html  View
105002 18954 CVE-2016-3074 20160421 CVE-2016-3074: libgd: signedness vulnerability  View
105003 18954 CVE-2016-3074 DSA-3556  View
105004 18954 CVE-2016-3074 DSA-3602  View
105005 18954 CVE-2016-3074 20160421 CVE-2016-3074: libgd: signedness vulnerability  View
105006 18954 CVE-2016-3074 87087  View
105007 18954 CVE-2016-3074 1035659  View
105008 18954 CVE-2016-3074 SSA:2016-120-02  View
105009 18954 CVE-2016-3074 USN-2987-1  View
105010 18954 CVE-2016-3074 https://github.com/libgd/libgd/commit/2bb97f407c1145c850416a3bfbcc8cf124e68a19  View
105011 18954 CVE-2016-3074 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731  View
105012 18954 CVE-2016-3074 GLSA-201607-04  View
105013 18954 CVE-2016-3074 39736  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1690 JVNDB-2016-002463 GD Graphics Library における整数符号エラーの脆弱性 GD Graphics Library (別名 libgd または libgd2) には、整数符号エラーの脆弱性が存在します。 CVE-2016-3074 89580 CVE-2016-3074 18954 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002463.html 2016-04-16 2016-10-26 View