REDHAT-BUG-431568: Buffer Overflow
Common Vulnerabilities and Exposures assigned an identifier CVE-2006-4484 to the following vulnerability:
Buffer overflow in the LWZReadByte function in ext/gd/libgd/gdgifin.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with inputcodesize greater than MAXLWZBITS, which triggers an overflow when initializing the table array.
References: http://bugs.php.net/bug.php?id=38112 http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/gdgifin.c?r1=1.10&r2=1.11 http://www.php.net/ChangeLog-5.php#5.1.5
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-431568?
The severity of REDHAT-BUG-431568 is considered high due to the potential for remote code execution.
How do I fix REDHAT-BUG-431568?
To fix REDHAT-BUG-431568, upgrade to PHP version 5.1.5 or later.
What products are affected by REDHAT-BUG-431568?
The affected product for REDHAT-BUG-431568 is PHP versions prior to 5.1.5.
What type of vulnerability is REDHAT-BUG-431568?
REDHAT-BUG-431568 is classified as a buffer overflow vulnerability.
Can REDHAT-BUG-431568 lead to data compromise?
Yes, REDHAT-BUG-431568 can potentially lead to data compromise through remote code execution.