Skip to content

Latest commit

 

History

History
 
 

CVE-2004-0990

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 

CVE-2004-0990

Experiment Environment

CentOS 6.5

INSTALL & Configuration

wget https://github.com/mudongliang/source-packages/raw/master/CVE-2004-0990/gd-2.0.28.tar.gz
tar -xvf gd-2.0.28.tar.gz 
cd gd-2.0.28/
./configure --prefix="$PWD/install"
make
make install

Problems in Installation & Configuration

How to trigger vulnerability

gcc -o exploit 600.c -lz
./exploit
./gdtest britnay_spares_pr0n.png

PoCs

GD Graphics Library - Local Heap Overflow

Vulnerability Patch

Patch

References

GD Graphics Library integer overflow leading to heap overflow

Redhat Bugzilla Bug 138808