NVD

Id
42147  
Name
CVE-2013-7456  
Description
gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted image that is mishandled by the imagescale function.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2016-08-07  
Modified Date
2017-01-17  
Seq
2013-7456  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
212728 42147 CVE-2013-7456 http://php.net/ChangeLog-5.php  View
212729 42147 CVE-2013-7456 http://php.net/ChangeLog-7.php  View
212730 42147 CVE-2013-7456 DSA-3587  View
212731 42147 CVE-2013-7456 DSA-3602  View
212732 42147 CVE-2013-7456 [oss-security] 20160526 Re: Fwd: CVE for PHP 5.5.36 issues  View
212733 42147 CVE-2013-7456 90859  View
212734 42147 CVE-2013-7456 USN-3030-1  View
212735 42147 CVE-2013-7456 https://bugs.php.net/bug.php?id=72227  View
212736 42147 CVE-2013-7456 https://github.com/libgd/libgd/commit/4f65a3e4eedaffa1efcf9ee1eb08f0b504fbc31a  View
212737 42147 CVE-2013-7456 https://github.com/php/php-src/commit/7a1aac3343af85b4af4df5f8844946eaa27394ab?w=1  View
212738 42147 CVE-2013-7456 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25176 JVNDB-2013-006753 PHP で使用される GD Graphics Library の gd_interpolation.c におけるサービス運用妨害 (DoS) の脆弱性 PHP で使用される GD Graphics Library (別名 libgd) の gd_interpolation.c には、サービス運用妨害 (境界外読み取り) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2013-7456 67398 CVE-2013-7456 42147 6.8 7.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006753.html 2013-09-24 2016-08-17 View