CVE-2008-5498

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-12-26 · updated 2026-06-16
Weakness: CWE-200

Description

Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.

Affected products

PHP: through 5.2.8; 5, 5.0-rc1, 5.0-rc2, 5.0-rc3, 5.0.0, 5.0.0-beta1 (+26)

References

http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.2027.2.547.2.1360&r2=1.2027.2.547.2.1361&diff_format=u
http://downloads.securityfocus.com/vulnerabilities/exploits/33002-2.php
http://downloads.securityfocus.com/vulnerabilities/exploits/33002.php
http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
http://marc.info/?l=bugtraq&m=124654546101607&w=2
http://marc.info/?l=bugtraq&m=125631037611762&w=2
http://osvdb.org/51031
http://secunia.com/advisories/34642
http://secunia.com/advisories/35306
http://secunia.com/advisories/35650
http://secunia.com/advisories/36701

Get alerted when CVE-2008-5498 or the next vulnerability affects your stack