VUPEN - PHP GD Graphics Library "_gdGetColors()" Buffer Overflow Vulnerability / Exploit (Security Advisories

	About Us \| Contact Us

VUPEN Free Resources

VUPEN Security Advisories

VUPEN Security Blog & News

Zero-day Attacks Monitor

Daily Security Mailinglist

Explanation of Terms

Advanced Search Engine

PHP GD Graphics Library "_gdGetColors()" Buffer Overflow Vulnerability

VUPEN ID	VUPEN/ADV-2009-2930
CVE ID	CVE-2009-3546
CWE ID	Available in VUPEN VNS Customer Area
CVSS V2	Available in VUPEN VNS Customer Area
Rated as	Moderate Risk
Impact	Available in VUPEN VNS Customer Area
Authentication Level	Available in VUPEN VNS Customer Area
Access Vector	Available in VUPEN VNS Customer Area
Release Date	2009-10-16
Share

Technical Description

A vulnerability has been identified in PHP, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by an error in GD. For additional information, see : VUPEN/ADV-2009-2929

Affected Products

PHP versions 5.x

Solution

Patches are available via SVN :
http://svn.php.net/viewvc?view=revision&revision=289557

References

http://www.vupen.com/english/advisories/2009/2930
http://www.openwall.com/lists/oss-security/2009/10/15/13

Credits

Vulnerability reported by Tomas Hoger.

Changelog

2009-10-16 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.

Monthly Statistics

VUPEN Security Advisories By Criticality: Aug 2010
Critical Risk	: 0%
High Risk	: 0%
Moderate Risk	: 0%
Low Risk	: 100%

Get a real-time view of the vulnerabilities affecting your systems using the VUPEN VNS reporting capabilities.

Try VUPEN VNS