PHP » PHP : Security Vulnerabilities, CVEs, Published In February 2014 (Denial of service) CVSS score >= 2
Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in the magic of a file.
Max CVSS
5.0
EPSS Score
5.78%
Published
2014-02-18
Updated
2022-10-31
Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allow remote attackers to cause a denial of service (application crash) or obtain sensitive information via an imagecrop function call with a negative value for the (1) x or (2) y dimension, a different vulnerability than CVE-2013-7226.
Max CVSS
5.8
EPSS Score
0.83%
Published
2014-02-18
Updated
2014-03-08
The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via invalid imagecrop arguments that lead to use of a NULL pointer as a return value, a different vulnerability than CVE-2013-7226.
Max CVSS
6.8
EPSS Score
0.57%
Published
2014-02-18
Updated
2016-09-21
Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an imagecrop function call with a large x dimension value, leading to a heap-based buffer overflow.
Max CVSS
6.8
EPSS Score
4.79%
Published
2014-02-18
Updated
2017-08-29
4 vulnerabilities found