Lucene search

K
osvGoogleOSV:DSA-601-1
HistoryNov 29, 2004 - 12:00 a.m.

libgd1 - integer overflow

2004-11-2900:00:00
Google
osv.dev
7

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

More potential integer overflows have been found in the GD graphics
library which weren’t covered by our security advisory
DSA 589. They
could be exploited by a specially crafted graphic and could lead to
the execution of arbitrary code on the victim’s machine.

For the stable distribution (woody) these problems have been fixed in
version 1.8.4-17.woody4.

For the unstable distribution (sid) these problems will be fixed soon.

We recommend that you upgrade your libgd1 packages.

CPENameOperatorVersion
libgdeq1.8.4-17.woody2

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C