Description
The imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gamma values, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by providing different signs for the second and third arguments.
Remediation
References
Related Vulnerabilities
WordPress Plugin Passster-Password Protection Security Bypass (3.5.5.8)
WordPress Plugin All in One Webmaster Cross-Site Request Forgery (8.2.3)
WordPress Plugin Uploadify Integration Multiple Cross-Site Scripting Vulnerabilities (0.9.6)
WordPress Plugin WP Product Review Lite Unspecified Vulnerability (3.7.6)