Unscored severity · published Aug 23, 2014
CVE-2014-5120
gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite…
–
CVSS
16.9%
EPSS
No
On KEV
Description
gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif, (4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function.
Exploitation
Is it being used?
Exploit prediction (EPSS)16.9% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
PHP · PHP
5.4.0; 5.4.0; 5.4.0; 5.4.0; 5.4.1; 5.4.2; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-5120
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-5120
lists.apple.com
http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2014-09/msg00024.html
php.net
http://php.net/ChangeLog-5.php
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2014-1327.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2014-1765.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2014-1766.html
More from PHP
9.8
CVE-2026-109618
RCE via OOM corruption
9.8
CVE-2024-4577
Argument Injection in PHP-CGI
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2016-10033
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute…
9.8
CVE-2012-1823
PHP-CGI Query String Parameter Vulnerability