NVD

Id
30919  
Name
CVE-2014-2497  
Description
The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-03-21  
Modified Date
2017-01-06  
Seq
2014-2497  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
162594 30919 CVE-2014-2497 http://advisories.mageia.org/MGASA-2014-0288.html  View
162595 30919 CVE-2014-2497 APPLE-SA-2015-04-08-2  View
162596 30919 CVE-2014-2497 SUSE-SU-2014:0868  View
162597 30919 CVE-2014-2497 SUSE-SU-2014:0869  View
162598 30919 CVE-2014-2497 RHSA-2014:1326  View
162599 30919 CVE-2014-2497 RHSA-2014:1327  View
162600 30919 CVE-2014-2497 RHSA-2014:1765  View
162601 30919 CVE-2014-2497 RHSA-2014:1766  View
162602 30919 CVE-2014-2497 59061  View
162603 30919 CVE-2014-2497 59418  View
162604 30919 CVE-2014-2497 59496  View
162605 30919 CVE-2014-2497 DSA-3215  View
162606 30919 CVE-2014-2497 MDVSA-2015:153  View
162607 30919 CVE-2014-2497 http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
162608 30919 CVE-2014-2497 66233  View
162609 30919 CVE-2014-2497 USN-2987-1  View
162610 30919 CVE-2014-2497 https://bugs.php.net/bug.php?id=66901  View
162611 30919 CVE-2014-2497 https://bugzilla.redhat.com/show_bug.cgi?id=1076676  View
162612 30919 CVE-2014-2497 GLSA-201607-04  View
162613 30919 CVE-2014-2497 https://support.apple.com/HT204659  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12892 JVNDB-2014-001767 PHP で使用される libgd の gdxpm.c 内の gdImageCreateFromXpm 関数におけるサービス運用妨害 (DoS) の脆弱性 PHP で使用される libgd の gdxpm.c 内の gdImageCreateFromXpm 関数には、サービス運用妨害 (NULL ポインタデリファレンスおよびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-2497 69784 CVE-2014-2497 30919 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001767.html 2014-03-13 2015-06-22 View