CVE-2007-0455

GD Graphics Library < 2.0.33 - Buffer Overflow

Title source: rule
STIX 2.1

Description

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.

References (35)

Core 35
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/22289
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/466166/100/0/threaded
Permissions Required vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0400
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0162.html
Permissions Required vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0022
Broken Link x_refsource_confirm
https://issues.rpath.com/browse/RPL-1268
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0146.html
Broken Link vendor-advisory x_refsource_trustix
http://www.trustix.org/errata/2007/0007
Broken Link x_refsource_confirm
https://issues.rpath.com/browse/RPL-1030
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-473-1
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24022
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29157
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24107
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24143
Not Applicable, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/23916
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24151
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/42813
Broken Link vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2007:038
Broken Link vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2007:035
Issue Tracking, Third Party Advisory x_refsource_confirm
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=224607
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24945
Broken Link vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2007:109
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24053
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24924
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24052
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html
Third Party Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2007-0155.html
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24965
Broken Link vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2007:036
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25575
Broken Link vendor-advisory x_refsource_fedora
http://fedoranews.org/cms/node/2631
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0153.html

Scores

EPSS 0.0549
EPSS Percentile 90.3%

Details

CWE
CWE-120
Status published
Products (13)
canonical/ubuntu_linux 6.06
canonical/ubuntu_linux 6.10
canonical/ubuntu_linux 7.04
fedoraproject/fedora 13
fedoraproject/fedora 14
gd_graphics_library_project/gd_graphics_library < 2.0.33
php/php 4.4.0 - 4.4.7
redhat/enterprise_linux_desktop 3.0
redhat/enterprise_linux_desktop 4.0
redhat/enterprise_linux_server 3.0
... and 3 more
Published Jan 30, 2007
Tracked Since Feb 18, 2026