Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2017-7890
Description:The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.31 and 7.x before 7.1.7, does not zero colorMap arrays before use. A specially crafted GIF image could use the uninitialized tables to read ~700 bytes from the top of the stack, potentially disclosing sensitive information.
Test IDs: 1.3.6.1.4.1.25623.1.0.882850   1.3.6.1.4.1.25623.1.1.12.2017.3389.2   1.3.6.1.4.1.25623.1.0.703938   1.3.6.1.4.1.25623.1.1.2.2018.1249   1.3.6.1.4.1.25623.1.0.891055   1.3.6.1.4.1.25623.1.0.843768  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-7890
BugTraq ID: 99492
http://www.securityfocus.com/bid/99492
Debian Security Information: DSA-3938 (Google Search)
http://www.debian.org/security/2017/dsa-3938
RedHat Security Advisories: RHSA-2018:0406
https://access.redhat.com/errata/RHSA-2018:0406
RedHat Security Advisories: RHSA-2018:1296
https://access.redhat.com/errata/RHSA-2018:1296




© 1998-2025 E-Soft Inc. All rights reserved.