CVE-2014-2497

The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer…

published March 21, 2014

CVSS
—
EPSS
20%
Percentile
97.5
In the wild
Unconfirmed
What it is

The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.20272 · 97.5th percentile
Published
2014-03-21T14:00Z
EPSS history
Timeline
  • 21 MAR 14:00Z
    The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer…
    cvelistv5