Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T14:37:05.965Z
Reserved: 2007-07-25T00:00:00
Link: CVE-2007-3996

No data.

Status : Modified
Published: 2007-09-04T18:17:00.000
Modified: 2024-11-21T00:34:32.767
Link: CVE-2007-3996
