NVD

Id
20939  
Name
CVE-2016-5766  
Description
Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-08-07  
Modified Date
2016-11-28  
Seq
2016-5766  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
114059 20939 CVE-2016-5766 http://github.com/php/php-src/commit/7722455726bec8c53458a32851d2a87982cf0eac?w=1  View
114060 20939 CVE-2016-5766 openSUSE-SU-2016:1761  View
114061 20939 CVE-2016-5766 SUSE-SU-2016:2013  View
114062 20939 CVE-2016-5766 openSUSE-SU-2016:1922  View
114063 20939 CVE-2016-5766 http://php.net/ChangeLog-5.php  View
114064 20939 CVE-2016-5766 http://php.net/ChangeLog-7.php  View
114065 20939 CVE-2016-5766 CVE-2016-5766  View
114066 20939 CVE-2016-5766 DSA-3619  View
114067 20939 CVE-2016-5766 [oss-security] 20160623 Re: CVE for PHP 5.5.37 issues  View
114068 20939 CVE-2016-5766 USN-3030-1  View
114069 20939 CVE-2016-5766 CVE-2016-5766  View
114070 20939 CVE-2016-5766 https://bugs.php.net/bug.php?id=72339  View
114071 20939 CVE-2016-5766 CVE-2016-5766  View
114072 20939 CVE-2016-5766 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731  View
114073 20939 CVE-2016-5766 https://libgd.github.io/release-2.2.3.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3577 JVNDB-2016-004350 PHP で使用される GD Graphics Library の gd_gd2.c の _gd2GetHeader 関数における整数オーバーフローの脆弱性 PHP で使用される GD Graphics Library (別名 libgd) の gd_gd2.c の _gd2GetHeader 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2016-5766 92272 CVE-2016-5766 20939 6.8 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004350.html 2016-06-23 2016-10-28 View