CVE-2007-1001
CVE-2007-1001
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.
EPSS 8.3% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.vupen.com/english/advisories/2007/2732
- http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.470053
- http://secunia.com/advisories/25056
- http://secunia.com/advisories/25151
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33453
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10179
- http://www.securityfocus.com/archive/1/466166/100/0/threaded
- http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
- http://security.gentoo.org/glsa/glsa-200705-19.xml
- http://www.redhat.com/support/errata/RHSA-2007-0162.html
- http://us2.php.net/releases/4_4_7.php
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:090
- http://www.securityfocus.com/archive/1/464957/100/0/threaded
- http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/wbmp.c?r1=1.2.4.1&r2=1.2.4.1.8.1
- http://secunia.com/advisories/24909
- http://ifsec.blogspot.com/2007/04/php-521-wbmp-file-handling-integer.html
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:087
- http://secunia.com/advisories/24945
- https://issues.rpath.com/browse/RPL-1268
- http://us2.php.net/releases/5_2_2.php
- http://docs.info.apple.com/article.html?artnum=306172
- http://secunia.com/advisories/24924
- http://www.securityfocus.com/bid/23357
- https://nvd.nist.gov/vuln/detail/CVE-2007-1001