CVE-2016-5767 Integer overflow in n/a
Remote attackers can cause a denial of service via crafted image dimensions due to an integer overflow in the GD Graphics Library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2016-5767?
CVE-2016-5767 is a high-severity vulnerability in n/a, published on 7 Aug 2016. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Integer overflow in the gdImageCreate function in gd.c in the GD Graphics Library (aka libgd) before 2.0.34RC1, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted image dimensions.
Weakness: CWE-190
Which versions are affected by CVE-2016-5767?
It affects 1 product.
Products include Libgd Libgd.
How do I fix CVE-2016-5767?
Upgrade to a fixed version.
Is CVE-2016-5767 being exploited?
There is no known exploitation of CVE-2016-5767 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as ALPINE-CVE-2016-5767, DEBIAN-CVE-2016-5767, GHSA-8h88-m6m2-5756.