CVE-2014-2020

ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check data types, which might allow remote attackers to obtain sensitive information by using a (1) string or…

published February 18, 2014

CVSS
—
EPSS
3%
Percentile
84.7
In the wild
Unconfirmed
What it is

ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check data types, which might allow remote attackers to obtain sensitive information by using a (1) string or (2) array data type in place of a numeric data type, as demonstrated by an imagecrop function call with a string for the x dimension value, a different vulnerability than CVE-2013-7226.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02530 · 84.7th percentile
Published
2014-02-18T11:00Z
EPSS history
Timeline
  • 18 FEB 11:00Z
    ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check data types, which might allow remote attackers to obtain sensitive information by using a (1) string or…
    cvelistv5