漏洞类别:Ubuntu
漏洞等级:
漏洞信息
A vulnerability was discovered in GD Graphics Library (aka libgd), as used in PHP that does not zero colorMap arrays before use.
漏洞危害
A specially crafted GIF image could use the uninitialized tables to read bytes from the top of the stack.
解决方案
Refer to Ubuntu advisory USN-3389-1 for affected packages and patching details, or update with your package manager.
Patch:
Following are links for downloading patches to fix the vulnerabilities:
USN-3389-1: 14.04 (Kylin) on src (libgd-tools)
0daybank
文章评论