Vulnerability Database

296,213

Total vulnerabilities in the database

CVE-2013-7328

Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allow remote attackers to cause a denial of service (application crash) or obtain sensitive information via an imagecrop function call with a negative value for the (1) x or (2) y dimension, a different vulnerability than CVE-2013-7226.

  • Published: Feb 18, 2014
  • Updated: Apr 13, 2023
  • CVE: CVE-2013-7328
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5.8
  • AV:N/AC:M/Au:N/C:P/I:N/A:P

CWEs:

Software From Fixed in
php / php 5.5.0-alpha1 5.5.0-alpha1.x
php / php 5.5.0-alpha3 5.5.0-alpha3.x
php / php 5.5.0-beta3 5.5.0-beta3.x
php / php 5.5.0 5.5.0.x
php / php 5.5.1 5.5.1.x
php / php 5.5.5 5.5.5.x
php / php 5.5.7 5.5.7.x
php / php 5.5.0-beta1 5.5.0-beta1.x
php / php 5.5.6 5.5.6.x
php / php 5.5.0-rc1 5.5.0-rc1.x
php / php 5.5.0-beta4 5.5.0-beta4.x
php / php 5.5.3 5.5.3.x
php / php 5.5.8 5.5.8.x
php / php 5.5.0-alpha6 5.5.0-alpha6.x
php / php 5.5.0-beta2 5.5.0-beta2.x
php / php 5.5.4 5.5.4.x
php / php 5.5.0-alpha4 5.5.0-alpha4.x
php / php 5.5.0-alpha5 5.5.0-alpha5.x
php / php 5.5.0-alpha2 5.5.0-alpha2.x
php / php 5.5.2 5.5.2.x
php / php 5.5.0-rc2 5.5.0-rc2.x