VULNERABILITY INTELLIGENCE

CVE-2007-1001

CVSS score6.8 MEDIUM
EPSS probability8.32%
CISA KEVNot currently listed
Published2007-04-06
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.

Primary references