CVE-2007-0455

2007-01-3017:28:00

CWE-120

[email protected]

web.nvd.nist.gov

cve-2007-0455

buffer overflow

gdimagestringftex

gd graphics library

denial of service

remote attackers

arbitrary code

crafted string

jis encoded font

nvd

6.9 Medium

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.051 Low

EPSS

Percentile

92.9%

JSON

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.

CPENameOperatorVersion
gd_graphics_library_project:gd_graphics_librarygd graphics library project gd graphics libraryle2.0.33
php:phpphplt4.4.7
canonical:ubuntu_linuxcanonical ubuntu linuxeq7.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq6.10
canonical:ubuntu_linuxcanonical ubuntu linuxeq6.06
fedoraproject:fedorafedoraproject fedoraeq13
fedoraproject:fedorafedoraproject fedoraeq14
redhat:enterprise_linux_desktopredhat enterprise linux desktopeq3.0
redhat:enterprise_linux_desktopredhat enterprise linux desktopeq4.0
redhat:enterprise_linux_serverredhat enterprise linux servereq4.0

CPE	Name	Operator	Version
gd_graphics_library_project:gd_graphics_library	gd graphics library project gd graphics library	le	2.0.33
php:php	php	lt	4.4.7
canonical:ubuntu_linux	canonical ubuntu linux	eq	7.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	6.10
canonical:ubuntu_linux	canonical ubuntu linux	eq	6.06
fedoraproject:fedora	fedoraproject fedora	eq	13
fedoraproject:fedora	fedoraproject fedora	eq	14
redhat:enterprise_linux_desktop	redhat enterprise linux desktop	eq	3.0
redhat:enterprise_linux_desktop	redhat enterprise linux desktop	eq	4.0
redhat:enterprise_linux_server	redhat enterprise linux server	eq	4.0