CVE-2014-5120

Published: Aug 23, 2014Modified: May 6, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif, (4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function.

Affected (68)

Products: Php: Php

Php

1 product

Php

Configuration A

68 vulnerable

Vulnerable Software	Affected Versions
Php Php	Version 5.4.0
Php Php	Version 5.4.0 beta2
Php Php	Version 5.4.0 beta2
Php Php	Version 5.4.0 rc2
Php Php	Version 5.4.10
Php Php	Version 5.4.11
Php Php	Version 5.4.12
Php Php	Version 5.4.12 rc1
Php Php	Version 5.4.12 rc2
Php Php	Version 5.4.13
Php Php	Version 5.4.13 rc1
Php Php	Version 5.4.14
Php Php	Version 5.4.14 rc1
Php Php	Version 5.4.15
Php Php	Version 5.4.15 rc1
Php Php	Version 5.4.16 rc1
Php Php	Version 5.4.17
Php Php	Version 5.4.18
Php Php	Version 5.4.19
Php Php	Version 5.4.1
Php Php	Version 5.4.20
Php Php	Version 5.4.21
Php Php	Version 5.4.22
Php Php	Version 5.4.23
Php Php	Version 5.4.24
Php Php	Version 5.4.25
Php Php	Version 5.4.26
Php Php	Version 5.4.27
Php Php	Version 5.4.28
Php Php	Version 5.4.29
Php Php	Version 5.4.2
Php Php	Version 5.4.30
Php Php	Version 5.4.31
Php Php	Version 5.4.3
Php Php	Version 5.4.4
Php Php	Version 5.4.5
Php Php	Version 5.4.6
Php Php	Version 5.4.7
Php Php	Version 5.4.8
Php Php	Version 5.4.9
Php Php	Version 5.5.0
Php Php	Version 5.5.0 alpha1
Php Php	Version 5.5.0 alpha2
Php Php	Version 5.5.0 alpha3
Php Php	Version 5.5.0 alpha4
Php Php	Version 5.5.0 alpha5
Php Php	Version 5.5.0 alpha6
Php Php	Version 5.5.0 beta1
Php Php	Version 5.5.0 beta2
Php Php	Version 5.5.0 beta3
Php Php	Version 5.5.0 beta4
Php Php	Version 5.5.0 rc1
Php Php	Version 5.5.0 rc2
Php Php	Version 5.5.10
Php Php	Version 5.5.11
Php Php	Version 5.5.12
Php Php	Version 5.5.13
Php Php	Version 5.5.14
Php Php	Version 5.5.15
Php Php	Version 5.5.1
Php Php	Version 5.5.2
Php Php	Version 5.5.3
Php Php	Version 5.5.4
Php Php	Version 5.5.5
Php Php	Version 5.5.6
Php Php	Version 5.5.7
Php Php	Version 5.5.8
Php Php	Version 5.5.9