CVE-2007-1001

Published: Apr 6, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.

Affected (75)

Products: Php: Php

Php

1 product

Php

Configuration A

75 vulnerable

Vulnerable Software	Affected Versions
Php Php	Version 4.0.0
Php Php	Version 4.0.1
Php Php	Version 4.0.1 patch1
Php Php	Version 4.0.1 patch2
Php Php	Version 4.0.2
Php Php	Version 4.0.3
Php Php	Version 4.0.3 patch1
Php Php	Version 4.0.4
Php Php	Version 4.0.4 patch1
Php Php	Version 4.0.5
Php Php	Version 4.0.6
Php Php	Version 4.0.7
Php Php	Version 4.0.7 rc1
Php Php	Version 4.0.7 rc2
Php Php	Version 4.0.7 rc3
Php Php	Version 4.0
Php Php	Version 4.0 beta1
Php Php	Version 4.0 beta2
Php Php	Version 4.0 beta3
Php Php	Version 4.0 beta4
Php Php	Version 4.0 beta_4_patch1
Php Php	Version 4.0 rc1
Php Php	Version 4.0 rc2
Php Php	Version 4.1.0
Php Php	Version 4.1.1
Php Php	Version 4.1.2
Php Php	Version 4.2.0
Php Php	Version 4.2.1
Php Php	Version 4.2.2
Php Php	Version 4.2.3
Php Php	Version 4.2
Php Php	Version 4.3.0
Php Php	Version 4.3.10
Php Php	Version 4.3.11
Php Php	Version 4.3.1
Php Php	Version 4.3.2
Php Php	Version 4.3.3
Php Php	Version 4.3.4
Php Php	Version 4.3.5
Php Php	Version 4.3.6
Php Php	Version 4.3.7
Php Php	Version 4.3.8
Php Php	Version 4.3.9
Php Php	Version 4.4.0
Php Php	Version 4.4.1
Php Php	Version 4.4.2
Php Php	Version 4.4.3
Php Php	Version 4.4.4
Php Php	Version 4.4.5
Php Php	Version 4.4.6
Php Php	Version 5.0.0
Php Php	Version 5.0.0 beta1
Php Php	Version 5.0.0 beta2
Php Php	Version 5.0.0 beta3
Php Php	Version 5.0.0 beta4
Php Php	Version 5.0.0 rc1
Php Php	Version 5.0.0 rc2
Php Php	Version 5.0.0 rc3
Php Php	Version 5.0.1
Php Php	Version 5.0.2
Php Php	Version 5.0.3
Php Php	Version 5.0.4
Php Php	Version 5.0.5
Php Php	Version 5.0 rc1
Php Php	Version 5.0 rc2
Php Php	Version 5.0 rc3
Php Php	Version 5.1.0
Php Php	Version 5.1.1
Php Php	Version 5.1.2
Php Php	Version 5.1.3
Php Php	Version 5.1.4
Php Php	Version 5.1.5
Php Php	Version 5.1.6
Php Php	Version 5.2.0
Php Php	Version 5.2.1

Related CWEs

CWE-189

References (70)

http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/wbmp.c?r1=1.2.4.1&r2=1.2.4.1.8.1

Source: secalert@redhat.com

http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/wbmp.c?revision=1.2.4.1.8.1&view=markup

Source: secalert@redhat.com

http://docs.info.apple.com/article.html?artnum=306172

Source: secalert@redhat.com

http://ifsec.blogspot.com/2007/04/php-521-wbmp-file-handling-integer.html

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2007-0155.html

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24814

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24909

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24924

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24945

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24965

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25056

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25151

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25445

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/26235

Source: secalert@redhat.com

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200705-19.xml

Source: secalert@redhat.com

http://us2.php.net/releases/4_4_7.php

Source: secalert@redhat.com

http://us2.php.net/releases/5_2_2.php

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:087

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:088

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:089

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:090

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_32_php.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0153.html

Source: secalert@redhat.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-0162.html

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/archive/1/464957/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/466166/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/23357

Source: secalert@redhat.com

http://www.securityfocus.com/bid/25159

Source: secalert@redhat.com

http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.470053

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1269

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2007/2732

Source: secalert@redhat.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/33453

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1268

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10179

Source: secalert@redhat.com

http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/wbmp.c?r1=1.2.4.1&r2=1.2.4.1.8.1