CVE-2014-2020 : ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check data types, which might all

ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check data types, which might allow remote attackers to obtain sensitive information by using a (1) string or (2) array data type in place of a numeric data type, as demonstrated by an imagecrop function call with a string for the x dimension value, a different vulnerability than CVE-2013-7226.

Published 2014-02-18 11:55:17

Updated 2025-04-11 00:51:22

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2014-2020

PHP » PHP
Versions up to, including, (<=) 5.5.8
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.0 Update Alpha1
cpe:2.3:a:php:php:5.5.0:alpha1:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.0 Update Alpha2
cpe:2.3:a:php:php:5.5.0:alpha2:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.0 Update Alpha4
cpe:2.3:a:php:php:5.5.0:alpha4:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.0 Update RC1
cpe:2.3:a:php:php:5.5.0:rc1:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.0 Update Alpha6
cpe:2.3:a:php:php:5.5.0:alpha6:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.0 Update Beta1
cpe:2.3:a:php:php:5.5.0:beta1:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.0 Update Beta2
cpe:2.3:a:php:php:5.5.0:beta2:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.0 Update Beta3
cpe:2.3:a:php:php:5.5.0:beta3:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.0 Update Alpha3
cpe:2.3:a:php:php:5.5.0:alpha3:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.0 Update Alpha5
cpe:2.3:a:php:php:5.5.0:alpha5:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.0 Update Beta4
cpe:2.3:a:php:php:5.5.0:beta4:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.0 Update RC2
cpe:2.3:a:php:php:5.5.0:rc2:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.5
cpe:2.3:a:php:php:5.5.5:*:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.6
cpe:2.3:a:php:php:5.5.6:*:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.1
cpe:2.3:a:php:php:5.5.1:*:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.3
cpe:2.3:a:php:php:5.5.3:*:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.2
cpe:2.3:a:php:php:5.5.2:*:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.4
cpe:2.3:a:php:php:5.5.4:*:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.5.7
cpe:2.3:a:php:php:5.5.7:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2014-2020

Top countries where our scanners detected CVE-2014-2020

Top open port discovered on systems with this issue 80

IPs affected by CVE-2014-2020 3,216

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2014-2020!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2014-2020

EPSS FAQ

0.34%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 54 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2014-2020

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

CWE ids for CVE-2014-2020

CWE-189

Assigned by: nvd@nist.gov (Primary)

References for CVE-2014-2020

https://bugs.php.net/bug.php?id=66356

PHP :: Sec Bug #66356 :: Heap Overflow Vulnerability in imagecrop()
Vendor Advisory

CVEs referencing this url
https://github.com/php/php-src/commit/2938329ce19cb8c4197dec146c3ec887c6f61d01

Fixed bug #66356 (Heap Overflow Vulnerability in imagecrop()) · php/php-src@2938329 · GitHub
Vendor Advisory

CVEs referencing this url
http://www.ubuntu.com/usn/USN-2126-1

USN-2126-1: PHP vulnerabilities | Ubuntu security notices

CVEs referencing this url