CVE-2014-9709

The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of…

published March 30, 2015

CVSS
—
EPSS
15%
Percentile
96.8
In the wild
Unconfirmed
What it is

The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15425 · 96.8th percentile
Published
2015-03-30T10:00Z
EPSS history
Timeline
  • 30 MAR 10:00Z
    The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of…
    cvelistv5