CVE-2013-7226: Buffer Overflow
A heap overflow vulnerability in PHP 5.5.0 and later was reported [1] in PHP's imagecrop() function. In code that used the imagecrop() function to crop untrusted images, this vulnerability could cause a crash of the script or, possibly, the execution of arbitrary code as the user running the PHP script.
This has been corrected in PHP 5.5.9 [2].
[1] https://bugs.php.net/bug.php?id=66356 [2] http://git.php.net/?p=php-src.git;a=commitdiff;h=8f4a5373bb71590352fd934028d6dde5bc18530b
External References:
http://www.php.net/ChangeLog-5.php#5.5.9
Other sources
Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an imagecrop function call with a large x dimension value, leading to a heap-based buffer overflow.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/phpto a version that resolves this vulnerability.Fixed in 5.5.10
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7226?
CVE-2013-7226 is considered to have a high severity due to the potential for remote code execution or denial of service.
How do I fix CVE-2013-7226?
To fix CVE-2013-7226, upgrade to PHP version 5.5.10 or later.
Which versions of PHP are affected by CVE-2013-7226?
CVE-2013-7226 affects PHP versions 5.5.0 up to, but not including, 5.5.10.
What is the impact of exploiting CVE-2013-7226?
Exploitation of CVE-2013-7226 could lead to a crash of the PHP script or the execution of arbitrary code.
What function in PHP is associated with CVE-2013-7226?
CVE-2013-7226 is associated with the imagecrop() function in PHP.