Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-3477
HistoryJun 28, 2007 - 6:30 p.m.

CVE-2007-3477

2007-06-2818:30:00
CWE-399
[email protected]
web.nvd.nist.gov
1

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.1 Medium

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.8%

JSON

The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.

Affected configurations

NVD
Node
libgdgd_graphics_libraryRange≤2.0.35rc5
OR
libgdgd_graphics_libraryMatch2.0.33
OR
libgdgd_graphics_libraryMatch2.0.34
OR
libgdgd_graphics_libraryMatch2.0.34rc1
OR
libgdgd_graphics_libraryMatch2.0.34rc2
OR
libgdgd_graphics_libraryMatch2.0.35rc1
OR
libgdgd_graphics_libraryMatch2.0.35rc2
OR
libgdgd_graphics_libraryMatch2.0.35rc3
OR
libgdgd_graphics_libraryMatch2.0.35rc4

References

Related

prion 1
cvelist 1
debiancve 1
ubuntucve 1
cve 1
debian 2
nessus 22
openvas 27
osv 1
ubuntu 1
securityvulns 2
freebsd 2
fedora 1
gentoo 1
archlinux 1
slackware 1
kitploit 1
prion
prion
Information disclosure
2007-06-28 18:30:00
cvelist
cvelist
CVE-2007-3477
2007-06-28 18:00:00
debiancve
debiancve
CVE-2007-3477
2007-06-28 18:30:00
ubuntucve
ubuntucve
CVE-2007-3477
2007-06-28 00:00:00
cve
cve
CVE-2007-3477
2007-06-28 18:30:00
debian
debian
[SECURITY] [DSA 1613-1] new libgd2 packages fix multiple vulnerabilities
2008-07-22 07:01:19
[SECURITY] [DSA 1613-1] new libgd2 packages fix multiple vulnerabilities
2008-07-22 07:01:19
nessus
nessus
Debian DSA-1613-1 : libgd2 - multiple vulnerabilities
2008-07-23 00:00:00
SuSE 10 Security Update : gd (ZYPP Patch Number 3895)
2007-12-13 00:00:00
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : libgd2 vulnerabilities (USN-854-1)
2009-11-06 00:00:00
openvas
openvas
Debian Security Advisory DSA 1613-1 (libgd2)
2008-08-15 00:00:00
SLES10: Security update for gd
2009-10-13 00:00:00
Debian: Security Advisory (DSA-1613-1)
2008-08-15 00:00:00
osv
osv
libgd2 - multiple vulnerabilities
2008-07-22 00:00:00
ubuntu
ubuntu
GD library vulnerabilities
2009-11-05 00:00:00
securityvulns
securityvulns
[ MDKSA-2007:153 ] - Updated gd packages fix several vulnerabilities
2007-08-05 00:00:00
PHP multiple DoS conditions
2007-09-08 00:00:00
freebsd
freebsd
gd -- multiple vulnerabilities
2007-06-21 00:00:00
libwmf -- multiple vulnerabilities
2004-10-12 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: gd-2.0.35-1.fc7
2007-09-07 17:19:34
gentoo
gentoo
GD: Multiple vulnerabilities
2007-08-09 00:00:00
archlinux
archlinux
[ASA-201701-1] libwmf: multiple issues
2017-01-01 00:00:00
slackware
slackware
[slackware-security] libwmf
2018-05-01 01:19:49
kitploit
kitploit
arch-audit - An utility like pkg-audit for Arch Linux
2016-10-15 14:30:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.1 Medium

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.8%

JSON
Related for NVD:CVE-2007-3477
prion1cvelist1debiancve1ubuntucve1cve1debian2nessus22openvas27osv1ubuntu1securityvulns2freebsd2fedora1gentoo1archlinux1slackware1kitploit1