Description

The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.

Remediation

References

CVE-2014-2497

Related Vulnerabilities

WordPress Plugin Checklist Cross-Site Scripting (1.1.5)

MySQL NULL Pointer Dereference Vulnerability (CVE-2020-1967)

WordPress Plugin Calendar Event Multi View Security Bypass (1.4.06)

MySQL CVE-2019-2743 Vulnerability (CVE-2019-2743)

Joomla Improper Input Validation Vulnerability (CVE-2011-2892)

Severity

Medium

Classification

CVE-2014-2497

Tags

Missing Update Known Vulnerabilities