CVE-2013-7328 | BDVDB-2026-59980 Detail

Description#

Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allow remote attackers to cause a denial of service (application crash) or obtain sensitive information via an imagecrop function call with a negative value for the (1) x or (2) y dimension, a different vulnerability than CVE-2013-7226.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12014-02-18Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.