- Home
- CVEs with nessus.description==Security Fix(es) :
- A flaw was found in the way certain error conditions
were handled by bzread() function in PHP. An attacker
could use this flaw to upload a specially crafted bz2
archive which, when parsed via the vulnerable function,
could cause the application to crash or execute
arbitrary code with the permissions of the user running
the PHP application. (CVE-2016-5399)
- An integer overflow flaw, leading to a heap-based buffer
overflow was found in the imagecreatefromgd2() function
of PHP's gd extension. A remote attacker could use this
flaw to crash a PHP application or execute arbitrary
code with the privileges of the user running that PHP
application using gd via a specially crafted GD2 image.
(CVE-2016-5766)
- An integer overflow flaw, leading to a heap-based buffer
overflow was found in the gdImagePaletteToTrueColor()
function of PHP's gd extension. A remote attacker could
use this flaw to crash a PHP application or execute
arbitrary code with the privileges of the user running
that PHP application using gd via a specially crafted
image buffer. (CVE-2016-5767)
- A double free flaw was found in the
mb_ereg_replace_callback() function of php which is used
to perform regex search. This flaw could possibly cause
a PHP application to crash. (CVE-2016-5768)
Additional Changes :
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top