PHP LibGD Extension 'gd_gif_in.c' Stack Buffer Overflow Vulnerability
BID:73306
Info
PHP LibGD Extension 'gd_gif_in.c' Stack Buffer Overflow Vulnerability
| Bugtraq ID: | 73306 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2014-9709 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 24 2015 12:00AM |
| Updated: | Jul 05 2016 10:05PM |
| Credit: | Francisco Alonso |
| Vulnerable: |
Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 HP HP-UX B.11.31 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 CentOS CentOS 6 Apple Mac Os X 10.7.4 Apple Mac Os X 10.7.3 Apple Mac Os X 10.7.1 |
| Not Vulnerable: | |
Discussion
PHP LibGD Extension 'gd_gif_in.c' Stack Buffer Overflow Vulnerability
PHP LibGD Extension is prone to a remote stack-based buffer-overflow because it fails to adequately bounds-check user-supplied data before copying it into an insufficiently sized buffer.
Attackers can exploit this issue to obtain sensitive information or crash the application resulting in a denial-of-service condition.
PHP LibGD Extension is prone to a remote stack-based buffer-overflow because it fails to adequately bounds-check user-supplied data before copying it into an insufficiently sized buffer.
Attackers can exploit this issue to obtain sensitive information or crash the application resulting in a denial-of-service condition.
Solution / Fix
PHP LibGD Extension 'gd_gif_in.c' Stack Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
PHP LibGD Extension 'gd_gif_in.c' Stack Buffer Overflow Vulnerability
References:
References:
- #68601 buffer read overflow in gd_gif_in.c (PHP)
- Better fix for #68601 for perf (PHP)
- Fix bug #68601 buffer read overflow in gd_gif_in.c (PHP)
- Fix possible buffer read overflow detected by -fsanitize=address, thanks to Jan (Remi Collet)
- PHP Homepage (PHP)
- [slackware-security] php (SSA:2015-111-10) (Slackware)
- HPSBUX03337 SSRT102066 rev.1 - HP-UX Apache Web Server Suite running Apache Web (HP)
- Oracle Linux Bulletin - January 2016 (Oracle)
- Security Advisory Important: php security and bug fix update (Redhat)
- Security Bulletin: Multiple vulnerabilities affect IBM Flex System Chassis Manag (IBM)
- Security Bulletin: Multiple vulnerabilities in php affect IBM Flex System Manger (IBM)