CVE-2007-1001 Integer overflow in n/a
Integer overflows in the PHP GD library allow attackers to execute arbitrary code via maliciously crafted WBMP images.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2007-1001?
CVE-2007-1001 is a medium-severity vulnerability in Php Php, published on 6 Apr 2007. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.
Weakness: CWE-189
Which versions are affected by CVE-2007-1001?
It affects 1 product.
Products include Php Php.
How do I fix CVE-2007-1001?
Upgrade to a fixed version.
Is CVE-2007-1001 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-1001 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Php Php
Sources
Also known as DEBIAN-CVE-2007-1001, GHSA-62rc-79c5-9jv7.