Description

The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.

Remediation

References

CVE-2014-2497

Related Vulnerabilities

Django Improper Validation of Specified Quantity in Input Vulnerability (CVE-2023-41164)

WordPress Plugin WordPress Users 'uid' Parameter SQL Injection (1.3)

WordPress Plugin RSS Includes Pages Unspecified Vulnerability (3.1)

Apache HTTP Server Incorrect Calculation of Buffer Size Vulnerability (CVE-2004-0940)

Python Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2010-3493)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2014-2497