NVD

Id
53209  
Name
CVE-2007-1001  
Description
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-04-05  
Modified Date
2011-09-08  
Seq
2007-1001  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
269342 53209 CVE-2007-1001 http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/wbmp.c?r1=1.2.4.1&r2=1.2.4.1.8.1  View
269343 53209 CVE-2007-1001 http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/wbmp.c?revision=1.2.4.1.8.1&view=markup  View
269344 53209 CVE-2007-1001 http://docs.info.apple.com/article.html?artnum=306172  View
269345 53209 CVE-2007-1001 http://ifsec.blogspot.com/2007/04/php-521-wbmp-file-handling-integer.html  View
269346 53209 CVE-2007-1001 APPLE-SA-2007-07-31  View
269347 53209 CVE-2007-1001 oval:org.mitre.oval:def:10179  View
269348 53209 CVE-2007-1001 RHSA-2007:0155  View
269349 53209 CVE-2007-1001 GLSA-200705-19  View
269350 53209 CVE-2007-1001 http://us2.php.net/releases/4_4_7.php  View
269351 53209 CVE-2007-1001 http://us2.php.net/releases/5_2_2.php  View
269352 53209 CVE-2007-1001 MDKSA-2007:087  View
269353 53209 CVE-2007-1001 MDKSA-2007:088  View
269354 53209 CVE-2007-1001 MDKSA-2007:089  View
269355 53209 CVE-2007-1001 MDKSA-2007:090  View
269356 53209 CVE-2007-1001 SUSE-SA:2007:032  View
269357 53209 CVE-2007-1001 RHSA-2007:0153  View
269358 53209 CVE-2007-1001 RHSA-2007:0162  View
269359 53209 CVE-2007-1001 20070407 PHP <= 5.2.1 wbmp file handling integer overflow  View
269360 53209 CVE-2007-1001 20070418 rPSA-2007-0073-1 php php-mysql php-pgsql  View
269361 53209 CVE-2007-1001 23357  View
269362 53209 CVE-2007-1001 25159  View
269363 53209 CVE-2007-1001 SSA:2007-127  View
269364 53209 CVE-2007-1001 ADV-2007-1269  View
269365 53209 CVE-2007-1001 ADV-2007-2732  View
269366 53209 CVE-2007-1001 php-gd-overflow(33453)  View
269367 53209 CVE-2007-1001 https://issues.rpath.com/browse/RPL-1268  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51608 JVNDB-2007-000270 PHP の GD ライブラリにおける createwbmp()/readwbmp() 関数による整数オーバーフローの脆弱性 PHP に含まれる GD ライブラリ (libgd) の createwbmp() 関数および readwbmp() 関数には、過度に大きな width、height の値を持つ Wireless Bitmap (WBMP) 形式の画像ファイルを処理した際に、整数オーバーフローが発生する脆弱性が存在します。 CVE-2007-1001 24356 CVE-2007-1001 53209 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000270.html 2007-04-05 2007-07-23 View