7.5
CVSSv2

CVE-2016-10166

Published: 15/03/2017 Updated: 04/11/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) prior to 2.2.4 allows remote malicious users to have unspecified impact via vectors related to decrementing the u variable.

Vulnerable Product Search on Vulmon Subscribe to Product

libgd libgd

Vendor Advisories

The GD library could be made to crash or run programs if it processed a specially crafted image file ...
Synopsis Moderate: rh-php71-php security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for rh-php71-php is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerabilit ...
Synopsis Critical: rh-php72-php security update Type/Severity Security Advisory: Critical Topic An update for rh-php72-php is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having a security impact of Critical A Common Vulnerability Scoring System (CVSS) ba ...
Multiple vulnerabilities have been discovered in libgd2, a library for programmatic graphics creation and manipulation, which may result in denial of service or potentially the execution of arbitrary code if a malformed file is processed For the stable distribution (jessie), these problems have been fixed in version 210-5+deb8u9 For the testing ...
Integer underflow in the _gdContributionsAlloc function in gd_interpolationc in the GD Graphics Library (aka libgd) before 224 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable ...