668
VMScore

CVE-2016-6912

Published: 26/01/2017 Updated: 04/11/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) prior to 2.2.4 allows remote malicious users to have unspecified impact via large width and height values.

Vulnerable Product Search on Vulmon Subscribe to Product

libgd libgd

Vendor Advisories

The GD library could be made to crash or run programs if it processed a specially crafted image file ...
Multiple vulnerabilities have been discovered in libgd2, a library for programmatic graphics creation and manipulation, which may result in denial of service or potentially the execution of arbitrary code if a malformed file is processed For the stable distribution (jessie), these problems have been fixed in version 210-5+deb8u9 For the testing ...
Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 224 allows remote attackers to have unspecified impact via large width and height values ...