FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2009-3546

This CVE name corresponds to:

Entered	Topic
2009-11-05	gd -- '_gdGetColors' remote buffer overflow vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2009-3546 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2009-3546
Phase	Assigned(20091005)

Description

The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.

References

Source	Reference
MLIST	[oss-security] 20091015 Re: CVE Request -- PHP 5 - 5.2.11
MLIST	[oss-security] 20091120 Re: CVE request: php 5.3.1 update
CONFIRM	http://svn.php.net/viewvc?view=revision&revision=289557
MANDRIVA	MDVSA-2009:285
BID	36712
SECUNIA	37069
SECUNIA	37080
VUPEN	ADV-2009-2929
VUPEN	ADV-2009-2930