Lucene search

K
osvGoogleOSV:DLA-189-1
HistoryApr 08, 2015 - 12:00 a.m.

libgd2 - security update

2015-04-0800:00:00
Google
osv.dev
23

0.039 Low

EPSS

Percentile

92.0%

Multiple vulnerabilities were discovered in libgd2, a graphics library:

  • CVE-2014-2497
    The gdImageCreateFromXpm() function would try to dereference a NULL
    pointer when reading an XPM file with a special color table. This
    could allow remote attackers to cause a denial of service (crash) via
    crafted XPM files.
  • CVE-2014-9709
    Importing an invalid GIF file using the gdImageCreateFromGif() function
    would cause a read buffer overflow that could allow remote attackers to
    cause a denial of service (crash) via crafted GIF files.
CPENameOperatorVersion
libgd2eq2.0.36~rc1~dfsg-5