20500Third-party advisory
http://secunia.com/advisories/20500 CVE-2006-2906
GD Graphics Library 2.0.33 - Remote Denial of Service
Record summary
CVE-2006-2906 has a selected CVSS score of 5.4; EIP currently links 1 catalogued exploit.
Description
The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2.0.33 allows remote attackers to cause a denial of service (CPU consumption) via malformed GIF data that causes an infinite loop.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBGD Graphics Library 2.0.33 - Remote Denial of ServiceExploitDB exploitby Xavier RocheNot analyzed1 file
References
Showing 12 of 2320571Third-party advisory
http://secunia.com/advisories/20571 20676Third-party advisory
http://secunia.com/advisories/20676 20853Third-party advisory
http://secunia.com/advisories/20853 20866Third-party advisory
http://secunia.com/advisories/20866 20887Third-party advisory
http://secunia.com/advisories/20887 21050Third-party advisory
http://secunia.com/advisories/21050 21186Third-party advisory
http://secunia.com/advisories/21186 23783Third-party advisory
http://secunia.com/advisories/23783 1067Third-party advisory
http://securityreason.com/securityalert/1067 DSA-1117Vendor advisory
http://www.debian.org/security/2006/dsa-1117 MDKSA-2006:112Vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:112