Lucene search

K
osvGoogleOSV:DSA-602-1
HistoryNov 29, 2004 - 12:00 a.m.

libgd2 - integer overlow

2004-11-2900:00:00
Google
osv.dev
6

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

More potential integer overflows have been found in the GD graphics
library which weren’t covered by our security advisory
DSA 591. They
could be exploited by a specially crafted graphic and could lead to
the execution of arbitrary code on the victim’s machine.

For the stable distribution (woody) these problems have been fixed in
version 2.0.1-10woody2.

For the unstable distribution (sid) these problems will be fixed soon.

We recommend that you upgrade your libgd2 packages.

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C