CVE-2013-7327: Input Validation
The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via invalid imagecrop arguments that lead to use of a NULL pointer as a return value, a different vulnerability than CVE-2013-7226.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7327?
CVE-2013-7327 has a severity rating that may lead to a denial of service via application crash or other unspecified impacts.
How do I fix CVE-2013-7327?
To fix CVE-2013-7327, upgrade PHP to version 5.5.9 or later.
Which PHP versions are affected by CVE-2013-7327?
CVE-2013-7327 affects PHP versions prior to 5.5.9, including all 5.5.x versions up to 5.5.8.
Can CVE-2013-7327 be exploited remotely?
Yes, CVE-2013-7327 can be exploited remotely by attackers using invalid image crop arguments.
Is CVE-2013-7327 specific to a certain operating system?
CVE-2013-7327 primarily affects PHP installations on various Ubuntu Linux versions, including 10.04 and 12.04.