CVE-2006-2906

Thomas Boutell graphics draw <2.0.33 - DoS

Title source: llm

Description

The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2.0.33 allows remote attackers to cause a denial of service (CPU consumption) via malformed GIF data that causes an infinite loop.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Xavier Roche · cdoslinux

https://www.exploit-db.com/exploits/27981

View Code ZIP pw:eip

References (22)

[Issue Tracking] https://issues.rpath.com/browse/RPL-939

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/26976

[Third Party Advisory] http://secunia.com/advisories/23783

[Third Party Advisory] http://secunia.com/advisories/21186

[Third Party Advisory] http://secunia.com/advisories/20887

[Vendor Advisory] https://usn.ubuntu.com/298-1/

[Third Party Advisory] http://secunia.com/advisories/21050

[Vendor Advisory] http://www.novell.com/linux/security/advisories/2006_31_php.html

[Exploit] http://www.securityfocus.com/archive/1/436132

[Vendor Advisory] http://www.trustix.org/errata/2006/0038

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDKSA-2006:113

[Third Party Advisory] http://securityreason.com/securityalert/1067

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/2174

[Third Party Advisory] http://secunia.com/advisories/20676

[Third Party Advisory] http://www.debian.org/security/2006/dsa-1117

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDKSA-2006:122

[Third Party Advisory] http://secunia.com/advisories/20853

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDKSA-2006:112

[Exploit] http://www.securityfocus.com/bid/18294

[Third Party Advisory] http://secunia.com/advisories/20866

... and 2 more

Scores

EPSS 0.1527

EPSS Percentile 94.6%

Details

Status published

Products (1)

thomas_boutell/graphics_draw_library 2.0.33

Published Jun 08, 2006

Tracked Since Feb 18, 2026