VulnerabilityModified
CVE-2007-1001
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP)…
MEDIUM 6.8EPSS 8.32%
Does this matter?
Lower severity and a low EPSS score (8.32%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 8.32% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-189
- Affected
- php/php
- Source
- secalert@redhat.com
References
- http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/wbmp.c?r1=1.2.4.1&r2=1.2.4.1.8.1
- http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/wbmp.c?revision=1.2.4.1.8.1&view=markup
- http://docs.info.apple.com/article.html?artnum=306172
- http://ifsec.blogspot.com/2007/04/php-521-wbmp-file-handling-integer.html
- http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
- http://rhn.redhat.com/errata/RHSA-2007-0155.htmlVendor Advisory
- http://secunia.com/advisories/24814Vendor Advisory
- http://secunia.com/advisories/24909Vendor Advisory
- http://secunia.com/advisories/24924Vendor Advisory
- http://secunia.com/advisories/24945Vendor Advisory
- http://secunia.com/advisories/24965Vendor Advisory
- http://secunia.com/advisories/25056Vendor Advisory
- http://secunia.com/advisories/25151Vendor Advisory
- http://secunia.com/advisories/25445Vendor Advisory
- http://secunia.com/advisories/26235Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200705-19.xml
- http://us2.php.net/releases/4_4_7.php
- http://us2.php.net/releases/5_2_2.php
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:087
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:088
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:089
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:090
- http://www.novell.com/linux/security/advisories/2007_32_php.html
- http://www.redhat.com/support/errata/RHSA-2007-0153.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2007-0162.htmlVendor Advisory
- http://www.securityfocus.com/archive/1/464957/100/0/threaded
- http://www.securityfocus.com/archive/1/466166/100/0/threaded
- http://www.securityfocus.com/bid/23357
- http://www.securityfocus.com/bid/25159
- http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.470053
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.