| Package | Affected versions | Patched versions |
|---|---|---|
| gdlib | = 1.8.4= 2.0.1= 2.0.15= 2.0.20= 2.0.21= 2.0.22= 2.0.23= 2.0.26= 2.0.27= 2.0.28 | |
| openpkg | = 2.1= 2.2= current |
Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free