vendor:
GD Graphics Library
by:
Xavier Roche
7.5
CVSS
HIGH
Denial-of-Service
CWE
Product Name: GD Graphics Library
Affected Version From: GD version 2.0.33
Affected Version To:
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested:
2006
Denial-of-Service Vulnerability in GD Graphics Library
Attackers can trigger an infinite-loop condition when the library tries to handle malformed image files. This allows them to consume excessive CPU resources on computers that use the affected software, denying service to legitimate users.
Mitigation:
Upgrade to a version of GD Graphics Library that is not affected by this vulnerability.