Red Hat Security AdvisoryRHSA-2010:0003
gd security update
Released 2010-01-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) gd-2.0.33-9.4.el5_4.2, gd-2.0.33-9.4.el5_4.2.i386, gd-2.0.33-9.4.el5_4.2.ia64 +9
- Red Hat Enterprise Linux AS version 4 gd-2.0.28-5.4E.el4_8.1, gd-2.0.28-5.4E.el4_8.1.i386, gd-2.0.28-5.4E.el4_8.1.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) gd-2.0.33-9.4.el5_4.2, gd-2.0.33-9.4.el5_4.2.i386, gd-progs-2.0.33-9.4.el5_4.2 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) gd-2.0.33-9.4.el5_4.2, gd-devel-2.0.33-9.4.el5_4.2, gd-devel-2.0.33-9.4.el5_4.2.i386
- Red Hat Enterprise Linux Desktop version 4 gd-2.0.28-5.4E.el4_8.1, gd-2.0.28-5.4E.el4_8.1.i386, gd-devel-2.0.28-5.4E.el4_8.1 +3
- Red Hat Enterprise Linux ES version 4 gd-2.0.28-5.4E.el4_8.1, gd-2.0.28-5.4E.el4_8.1.i386, gd-2.0.28-5.4E.el4_8.1.ia64 +6
- Red Hat Enterprise Linux WS version 4 gd-2.0.28-5.4E.el4_8.1, gd-2.0.28-5.4E.el4_8.1.i386, gd-2.0.28-5.4E.el4_8.1.ia64 +6
Fixes 1 record
Priority MEDIUM 53
The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct b…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.10247 · Published 2009-10-19 · Partial fix CWE-119
