The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2015-03-30T10:00:00
Updated: 2024-08-06T13:55:04.341Z
Reserved: 2015-03-23T00:00:00
Link: CVE-2014-9709
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2015-03-30T10:59:05.677
Modified: 2022-11-09T03:04:19.033
Link: CVE-2014-9709
Redhat