Description
Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.
Remediation
References
Related Vulnerabilities
MySQL CVE-2021-2012 Vulnerability (CVE-2021-2012)
RubyGems Cryptographic Issues Vulnerability (CVE-2013-4363)
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker SQL Injection (7.1.13)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-2272)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3126)