Description
Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and 5.3.x before 5.3.4 allows context-dependent attackers to cause a denial of service (application crash) via a large number of anti-aliasing steps in an argument to the imagepstext function.
References
- 45338 vdb-entry
- HPSBOV02763 vendor-advisory
- oval:org.mitre.oval:def:11939 vdb-entry signature
- 20101210 PHP 5.3.3 GD extension imagepstext stack buffer overflow mailing-list
- http://www.php.net/ChangeLog-5.php
- http://bugs.php.net/53492