CVE-2015-8874: Buffer Overflow
Stack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a denial of service via a crafted imagefilltoborder call.
Other sources
Fixed bug (Stack overflow with imagefilltoborder). (CVE-2015-8874)
— PHP
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8874?
CVE-2015-8874 has a high severity rating due to its potential to cause denial of service through stack consumption.
How do I fix CVE-2015-8874?
To fix CVE-2015-8874, update PHP to version 5.6.12 or higher, or upgrade to PHP 7.0.0 or later.
What versions of PHP are affected by CVE-2015-8874?
CVE-2015-8874 affects all PHP versions prior to 5.6.12 and versions up to and including 5.6.11.
What is the attack vector for CVE-2015-8874?
The attack vector for CVE-2015-8874 involves remote attackers exploiting the vulnerability via a crafted imagefilltoborder call.
What are the implications of exploiting CVE-2015-8874?
Exploiting CVE-2015-8874 can lead to a denial of service, rendering the application unresponsive due to stack overflow.