NVD

Id
21890  
Name
CVE-2016-7568  
Description
Integer overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted imagewebp and imagedestroy calls.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-09-28  
Modified Date
2016-11-28  
Seq
2016-7568  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
117297 21890 CVE-2016-7568 93184  View
117298 21890 CVE-2016-7568 https://bugs.php.net/bug.php?id=73003  View
117299 21890 CVE-2016-7568 https://github.com/libgd/libgd/commit/40bec0f38f50e8510f5bb71a82f516d46facde03  View
117300 21890 CVE-2016-7568 https://github.com/libgd/libgd/issues/308  View
117301 21890 CVE-2016-7568 https://github.com/php/php-src/commit/c18263e0e0769faee96a5d0ee04b750c442783c6  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4276 JVNDB-2016-005049 PHP で使用される GD Graphics Library の gd_webp.c の gdImageWebpCtx 関数における整数オーバーフローの脆弱性 PHP で使用される GD Graphics Library (別名 libgd) の gd_webp.c の gdImageWebpCtx 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2016-7568 94075 CVE-2016-7568 21890 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005049.html 2016-09-16 2016-10-04 View