CVE-2016-5766
HighSummary
Integer overflow in the _gd2GetHeader function in the GD Graphics Library (libgd) before version 2.2.3, as used in PHP before version 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image.
Risk Assessment
This vulnerability may lead to application crashes, which can disrupt service availability and affect system stability. Attackers may exploit this flaw to carry out denial of service attacks.
Recommendation
It is recommended to update the GD library to version 2.2.3 or later and to update PHP to version 5.5.37, 5.6.23, or 7.0.8 to mitigate the risks associated with this vulnerability.
Other vulnerabilities in GD Graphics Library (libgd) oraz PHP
Original NVD description (English source)
Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image.