CVE-2016-9933

Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28…

published January 4, 2017

CVSS
—
EPSS
7%
Percentile
94.0
In the wild
Unconfirmed
What it is

Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06871 · 94.0th percentile
Published
2017-01-04T20:00Z
EPSS history
Timeline
  • 04 JAN 20:00Z
    Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28…
    cvelistv5