CVE-2007-0455 Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbi...
HighCVSS 7.5
EPSS 12.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gd graphics library project gd graphics library | <= 2.0.33 | No fix listed |
| PHP | >= 4.4.0, < 4.4.7 | 4.4.7 |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 6.10 | No fix listed |
| Canonical Ubuntu Linux | = 7.04 | No fix listed |
| fedoraproject fedora | = 13 | No fix listed |
| fedoraproject fedora | = 14 | No fix listed |
| redhat enterprise linux desktop | = 3.0 | No fix listed |
| redhat enterprise linux desktop | = 4.0 | No fix listed |
| redhat enterprise linux server | = 3.0 | No fix listed |
| redhat enterprise linux server | = 4.0 | No fix listed |
| redhat enterprise linux workstation | = 3.0 | No fix listed |
| redhat enterprise linux workstation | = 4.0 | No fix listed |
| debian/libgd2(Debian:12) | < 2.0.35.dfsg-1 | 2.0.35.dfsg-1 |
| debian/libgd2(Debian:13) | < 2.0.35.dfsg-1 | 2.0.35.dfsg-1 |
| debian/libgd2(Debian:14) | < 2.0.35.dfsg-1 | 2.0.35.dfsg-1 |
References
- bugzilla.redhat.com issue-tracking third-party-advisory
- FEDORA-2007-150 broken-link vendor-advisory
- FEDORA-2010-19033 mailing-list third-party-advisory vendor-advisory
- FEDORA-2010-19022 mailing-list third-party-advisory vendor-advisory
- [security-announce] 20070208 rPSA-2007-0028-1 gd broken-link mailing-list
- RHSA-2007:0155 third-party-advisory vendor-advisory
- 23916 not-applicable third-party-advisory vendor-advisory
- 24022 not-applicable third-party-advisory
- 24052 not-applicable third-party-advisory
- 24053 not-applicable third-party-advisory
- 24107 not-applicable third-party-advisory
- 24143 not-applicable third-party-advisory
- 24151 not-applicable third-party-advisory
- 24924 not-applicable third-party-advisory
- 24945 not-applicable third-party-advisory
- 24965 not-applicable third-party-advisory
- 25575 not-applicable third-party-advisory
- 29157 not-applicable third-party-advisory
- 42813 not-applicable third-party-advisory
- MDKSA-2007:035 broken-link vendor-advisory
- MDKSA-2007:036 broken-link vendor-advisory
- MDKSA-2007:038 broken-link vendor-advisory
- MDKSA-2007:109 broken-link vendor-advisory
- RHSA-2007:0153 third-party-advisory vendor-advisory
- RHSA-2007:0162 third-party-advisory vendor-advisory
- RHSA-2008:0146 third-party-advisory vendor-advisory
- 20070418 rPSA-2007-0073-1 php php-mysql php-pgsql mailing-list third-party-advisory vdb-entry
- 22289 third-party-advisory vdb-entry
- 2007-0007 broken-link vendor-advisory
- USN-473-1 third-party-advisory vendor-advisory
- ADV-2007-0400 permissions-required vdb-entry
- ADV-2011-0022 permissions-required vdb-entry
- issues.rpath.com broken-link
- issues.rpath.com broken-link
- oval:org.mitre.oval:def:11303 signature third-party-advisory vdb-entry
- Debian Security Tracker CVE-2007-0455 vendor-advisory
- bugs.debian.org issue-tracking