Denial of Service was found in Horde_Image 2.x before 2.5.0 via a crafted URL to the "Null" image driver.
{ "binaries": [ { "binary_name": "php-horde-image", "binary_version": "2.3.4-2" } ] }