Description
Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
Remediation
References
Related Vulnerabilities
PHP Resource Management Errors Vulnerability (CVE-2006-1549)
WordPress Plugin WP Photo Album Plus Cross-Site Scripting (5.0.10)
WordPress Improper Input Validation Vulnerability (CVE-2008-4106)
WordPress Plugin WP Coder-add custom html, css and js code Cross-Site Request Forgery (2.5.2)
PrestaShop Incorrect Authorization Vulnerability (CVE-2020-5287)