Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-3546
HistoryOct 19, 2009 - 8:00 p.m.

CVE-2009-3546

2009-10-1920:00:00
CWE-119
[email protected]
web.nvd.nist.gov
7

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7

Confidence

Low

EPSS

0.018

Percentile

88.2%

JSON

The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
libgdgd_graphics_libraryMatch2.0.33
OR
libgdgd_graphics_libraryMatch2.0.34
OR
libgdgd_graphics_libraryMatch2.0.34rc1
OR
libgdgd_graphics_libraryMatch2.0.34rc2
OR
libgdgd_graphics_libraryMatch2.0.35
OR
libgdgd_graphics_libraryMatch2.0.35rc1
OR
libgdgd_graphics_libraryMatch2.0.35rc2
OR
libgdgd_graphics_libraryMatch2.0.35rc3
OR
libgdgd_graphics_libraryMatch2.0.35rc4
OR
libgdgd_graphics_libraryMatch2.0.35rc5
OR
libgdgd_graphics_libraryMatch2.0.36rc1
Node
phpphpMatch5.2.11
OR
phpphpMatch5.3.0
VendorProductVersionCPE
libgdgd_graphics_library2.0.33cpe:2.3:a:libgd:gd_graphics_library:2.0.33:*:*:*:*:*:*:*
libgdgd_graphics_library2.0.34cpe:2.3:a:libgd:gd_graphics_library:2.0.34:*:*:*:*:*:*:*
libgdgd_graphics_library2.0.34cpe:2.3:a:libgd:gd_graphics_library:2.0.34:rc1:*:*:*:*:*:*
libgdgd_graphics_library2.0.34cpe:2.3:a:libgd:gd_graphics_library:2.0.34:rc2:*:*:*:*:*:*
libgdgd_graphics_library2.0.35cpe:2.3:a:libgd:gd_graphics_library:2.0.35:*:*:*:*:*:*:*
libgdgd_graphics_library2.0.35cpe:2.3:a:libgd:gd_graphics_library:2.0.35:rc1:*:*:*:*:*:*
libgdgd_graphics_library2.0.35cpe:2.3:a:libgd:gd_graphics_library:2.0.35:rc2:*:*:*:*:*:*
libgdgd_graphics_library2.0.35cpe:2.3:a:libgd:gd_graphics_library:2.0.35:rc3:*:*:*:*:*:*
libgdgd_graphics_library2.0.35cpe:2.3:a:libgd:gd_graphics_library:2.0.35:rc4:*:*:*:*:*:*
libgdgd_graphics_library2.0.35cpe:2.3:a:libgd:gd_graphics_library:2.0.35:rc5:*:*:*:*:*:*
Rows per page:
1-10 of 131

Related

openvas 75
prion 2
nessus 44
ubuntucve 2
cvelist 2
cve 2
debiancve 1
freebsd 3
securityvulns 3
f5 2
nvd 1
ubuntu 1
redhat 2
veracode 1
oraclelinux 2
fedora 6
gentoo 2
centos 2
osv 1
debian 1
slackware 2
amazon 1
seebug 1
archlinux 1
kitploit 1
openvas
openvas
Mandrake Security Advisory MDVSA-2009:285 (php)
2009-10-27 00:00:00
Mandrake Security Advisory MDVSA-2009:285 (php)
2009-10-27 00:00:00
Mandriva Security Advisory MDVSA-2009:284-1 (gd)
2009-12-10 00:00:00
prion
prion
Buffer overflow
2009-10-19 20:00:00
Design/Logic Flaw
2009-09-22 10:30:00
nessus
nessus
FreeBSD : gd -- '_gdGetColors' remote buffer overflow vulnerability (4e8344a3-ca52-11de-8ee8-00215c6a37bb)
2009-11-09 00:00:00
Mandriva Linux Security Advisory : gd (MDVSA-2009:284-1)
2009-10-22 00:00:00
Mandriva Linux Security Advisory : php (MDVSA-2009:285)
2009-10-22 00:00:00
ubuntucve
ubuntucve
CVE-2009-3546
2009-10-19 00:00:00
CVE-2009-3293
2009-09-22 00:00:00
cvelist
cvelist
CVE-2009-3546
2009-10-19 19:27:00
CVE-2009-3293
2009-09-22 10:00:00
cve
cve
CVE-2009-3546
2009-10-19 20:00:00
CVE-2009-3293
2009-09-22 10:30:00
debiancve
debiancve
CVE-2009-3546
2009-10-19 20:00:00
freebsd
freebsd
gd -- '_gdGetColors' remote buffer overflow vulnerability
2009-10-15 00:00:00
php5 -- Multiple security issues
2009-09-17 00:00:00
libwmf -- multiple vulnerabilities
2004-10-12 00:00:00
securityvulns
securityvulns
[ MDVSA-2009:284 ] gd
2009-10-20 00:00:00
PHP multiple security vulnerabilities
2009-10-20 00:00:00
[ MDVSA-2009:248 ] php
2009-09-28 00:00:00
f5
f5
SOL13275 - PHP vulnerability CVE-2009-3293
2011-12-15 00:00:00
K13275 : PHP vulnerability CVE-2009-3293
2013-09-12 00:00:00
nvd
nvd
CVE-2009-3293
2009-09-22 10:30:00
ubuntu
ubuntu
GD library vulnerabilities
2009-11-05 00:00:00
redhat
redhat
(RHSA-2010:0003) Moderate: gd security update
2010-01-04 00:00:00
(RHSA-2010:0040) Moderate: php security update
2010-01-13 00:00:00
veracode
veracode
Buffer Overflow
2019-06-03 06:31:32
oraclelinux
oraclelinux
gd security update
2010-01-04 00:00:00
php security update
2010-01-13 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: gd-2.0.35-17.fc17
2012-06-30 08:36:08
[SECURITY] Fedora 12 Update: php-5.3.1-1.fc12
2009-12-04 23:35:53
[SECURITY] Fedora 16 Update: gd-2.0.35-17.fc16
2012-06-30 08:36:30
gentoo
gentoo
GD: User-assisted execution of arbitrary code
2010-06-03 00:00:00
PHP: Multiple vulnerabilities
2010-01-05 00:00:00
centos
centos
gd security update
2010-01-04 23:33:40
php security update
2010-01-13 22:42:15
osv
osv
libgd2 - several vulnerabilities
2009-11-17 00:00:00
debian
debian
[SECURITY] [DSA 1936-1] New libgd2 packages fix several vulnerabilities
2009-11-17 20:52:01
slackware
slackware
php
2009-10-04 00:01:56
[slackware-security] libwmf
2018-05-01 01:19:49
amazon
amazon
Important: libwmf
2015-10-27 13:51:00
seebug
seebug
PHP 5.2.11版本修复多个安全漏洞
2009-09-23 00:00:00
archlinux
archlinux
[ASA-201701-1] libwmf: multiple issues
2017-01-01 00:00:00
kitploit
kitploit
arch-audit - An utility like pkg-audit for Arch Linux
2016-10-15 14:30:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7

Confidence

Low

EPSS

0.018

Percentile

88.2%

JSON
Related for NVD:CVE-2009-3546
openvas75prion2nessus44ubuntucve2cvelist2cve2debiancve1freebsd3securityvulns3f52nvd1ubuntu1redhat2veracode1oraclelinux2fedora6gentoo2centos2osv1debian1slackware2amazon1seebug1archlinux1kitploit1