From d965e28c53aef857e73653d8c24a5143aacb3c63 Mon Sep 17 00:00:00 2001 From: Stanislav Sedov Date: Mon, 5 Jan 2009 09:06:12 +0000 Subject: - Document PHP gd library vulnerability. --- security/vuxml/vuln.xml | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) (limited to 'security') diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 439ec591663f..d636691de204 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,36 @@ Note: Please add new entries to the beginning of this file. --> + + php5-gd -- uninitialized memory information disclosure vulnerability + + + php5-gd + 0 + + + + +

According to CVE-2008-5498 entry:

+
Array index error in the "imageRotate" function in PHP 5.2.8 and + earlier allows context-dependent attackers to read the contents + of arbitrary memory locations via a crafted value of the third + argument (aka the "bgd_color" or "clrBack" argument) for an indexed + image.
+

+ + + + 33002 + CVE-2008-5498 + http://www.securiteam.com/unixfocus/6G00Y0ANFU.html + + + 2008-12-24 + 2009-01-05 + + awstats -- multiple XSS vulnerabilities -- cgit v1.2.3