Description
Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote attackers to cause a denial of service (crash) or potentially execute arbitrary code via crafted compressed gd2 data, which triggers a heap-based buffer overflow.
Remediation
References
Related Vulnerabilities
Moodle Other Vulnerability (CVE-2005-3648)
Dot CMS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-19138)
Joomla Other Vulnerability (CVE-2007-4185)
WordPress Plugin Polldaddy Polls & Ratings Cross-Site Request Forgery (2.0.20)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5481)