5 results · Feed
-
Medium 6.1
Confused deputy attack in sandbox module resolution
Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior to 8.2, code evaluated using the Racket sandbox could cause system modules to incorrectly use attacker-created modules instead of their inte…
-
Unscored —CVE-2009-3546 EPSS 10%
The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not pr…
-
Unscored —
Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (applicatio…
-
Unscored —
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause…
-
Unscored —
Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers…