CVE-2013-7456
gd: incorrect boundary adjustment in _gdContributionsCalc
Severity Score
7.6
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted image that is mishandled by the imagescale function.
gd_interpolation.c en la GD Graphics Library (también conocido como libgd) en versiones anteriores a 2.1.1, tal como se usa en PHP en versiones anteriores 5.5.36, 5.6.x en versiones anteriores 5.6.22 y 7.x en versiones anteriores 7.0.7, permite a atacantes remotos provocar una denegación de servicio (lectura fuera de rango) o posiblemente tener otro impacto no especificado a través de una imagen manipulada que no es manejada adecuadamente por la función imagescale.
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. The memcache, mongo, and XDebug extensions are also included. The rh-php56 Software Collection has been upgraded to version 5.6.25, which provides a number of bug fixes and enhancements over the previous version. Security Fixes in the rh-php56-php component have been added.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2016-05-26 CVE Reserved
- 2016-05-27 CVE Published
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- 2025-07-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-125: Out-of-bounds Read
CAPEC
References (14)
| URL | Tag | Source |
|---|---|---|
| http://php.net/ChangeLog-5.php | Release Notes | |
| http://php.net/ChangeLog-7.php | Release Notes | |
| http://www.openwall.com/lists/oss-security/2016/05/26/3 | Mailing List |
|
| http://www.securityfocus.com/bid/90859 | Vdb Entry | |
| https://github.com/libgd/libgd/commit/4f65a3e4eedaffa1efcf9ee1eb08f0b504fbc31a | X_refsource_confirm | |
| https://github.com/php/php-src/commit/7a1aac3343af85b4af4df5f8844946eaa27394ab?w=1 | X_refsource_confirm | |
| https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 | X_refsource_confirm |
| URL | Date | SRC |
|---|---|---|
| https://bugs.php.net/bug.php?id=72227 | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://rhn.redhat.com/errata/RHSA-2016-2750.html | 2018-01-05 | |
| http://www.debian.org/security/2016/dsa-3587 | 2018-01-05 | |
| http://www.debian.org/security/2016/dsa-3602 | 2018-01-05 | |
| http://www.ubuntu.com/usn/USN-3030-1 | 2018-01-05 | |
| https://access.redhat.com/security/cve/CVE-2013-7456 | 2016-11-15 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1340433 | 2016-11-15 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | <= 5.5.35 Search vendor "Php" for product "Php" and version " <= 5.5.35" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.0 Search vendor "Php" for product "Php" and version "5.6.0" | alpha1 |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.0 Search vendor "Php" for product "Php" and version "5.6.0" | alpha2 |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.0 Search vendor "Php" for product "Php" and version "5.6.0" | alpha3 |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.0 Search vendor "Php" for product "Php" and version "5.6.0" | alpha4 |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.0 Search vendor "Php" for product "Php" and version "5.6.0" | alpha5 |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.0 Search vendor "Php" for product "Php" and version "5.6.0" | beta1 |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.0 Search vendor "Php" for product "Php" and version "5.6.0" | beta2 |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.0 Search vendor "Php" for product "Php" and version "5.6.0" | beta3 |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.0 Search vendor "Php" for product "Php" and version "5.6.0" | beta4 |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.1 Search vendor "Php" for product "Php" and version "5.6.1" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.2 Search vendor "Php" for product "Php" and version "5.6.2" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.3 Search vendor "Php" for product "Php" and version "5.6.3" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.4 Search vendor "Php" for product "Php" and version "5.6.4" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.5 Search vendor "Php" for product "Php" and version "5.6.5" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.6 Search vendor "Php" for product "Php" and version "5.6.6" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.7 Search vendor "Php" for product "Php" and version "5.6.7" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.8 Search vendor "Php" for product "Php" and version "5.6.8" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.9 Search vendor "Php" for product "Php" and version "5.6.9" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.10 Search vendor "Php" for product "Php" and version "5.6.10" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.11 Search vendor "Php" for product "Php" and version "5.6.11" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.12 Search vendor "Php" for product "Php" and version "5.6.12" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.13 Search vendor "Php" for product "Php" and version "5.6.13" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.14 Search vendor "Php" for product "Php" and version "5.6.14" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.15 Search vendor "Php" for product "Php" and version "5.6.15" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.16 Search vendor "Php" for product "Php" and version "5.6.16" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.17 Search vendor "Php" for product "Php" and version "5.6.17" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.18 Search vendor "Php" for product "Php" and version "5.6.18" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.19 Search vendor "Php" for product "Php" and version "5.6.19" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.20 Search vendor "Php" for product "Php" and version "5.6.20" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.6.21 Search vendor "Php" for product "Php" and version "5.6.21" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 7.0.0 Search vendor "Php" for product "Php" and version "7.0.0" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 7.0.1 Search vendor "Php" for product "Php" and version "7.0.1" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 7.0.2 Search vendor "Php" for product "Php" and version "7.0.2" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 7.0.3 Search vendor "Php" for product "Php" and version "7.0.3" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 7.0.4 Search vendor "Php" for product "Php" and version "7.0.4" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 7.0.5 Search vendor "Php" for product "Php" and version "7.0.5" | - |
Safe
|
| Libgd Search vendor "Libgd" | Libgd Search vendor "Libgd" for product "Libgd" | 2.1.0 Search vendor "Libgd" for product "Libgd" and version "2.1.0" | - |
Affected
| in | Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 7.0.6 Search vendor "Php" for product "Php" and version "7.0.6" | - |
Safe
|