« List of all CVEs

CVE-2014-9709

Published: 3/30/2015 Last updated: 8/6/2024 Reserved: 3/23/2015

The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (1)

conf-gd

Products affected (1)

Product Vendor Version
n/a n/a SM7325P

References (48)