| Package | Affected versions | Patched versions |
|---|---|---|
| php | ≥ 5.5.0, < 5.5.16< 5.4.32 | 5.5.165.4.32 |
The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free