632
VMScore

CVE-2016-9317

Published: 26/01/2017 Updated: 04/11/2017
CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 632
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C

Vulnerability Summary

The gdImageCreate function in the GD Graphics Library (aka libgd) prior to 2.2.4 allows remote malicious users to cause a denial of service (system hang) via an oversized image.

Vulnerable Product Search on Vulmon Subscribe to Product

libgd libgd

Vendor Advisories

The GD library could be made to crash or run programs if it processed a specially crafted image file ...
Multiple vulnerabilities have been discovered in libgd2, a library for programmatic graphics creation and manipulation, which may result in denial of service or potentially the execution of arbitrary code if a malformed file is processed For the stable distribution (jessie), these problems have been fixed in version 210-5+deb8u9 For the testing ...
The gdImageCreate function in the GD Graphics Library (aka libgd) before 224 allows remote attackers to cause a denial of service (system hang) via an oversized image ...