| Package | Affected versions | Patched versions |
|---|---|---|
| gd graphics library | ≤ 2.0.33 | |
| php | ≥ 4.4.0, < 4.4.7 | 4.4.7 |
Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free