ECHO-A7ED-BFEC-5FE3 Array index error in gd_gif_in.c in the bundled GD graphics library (libgd before 2.0.35), reached via the GIF reader (gdImageCreateFromGif). libwmf carries its own copy of GD under src/extra/gd and compiles it (Debian does not build-depend on libgd-dev, so LIBWMF_OPT_SYS_GD is off), but that copy ships no GIF reader at all: there is no gd_gif_in.c/gd_gif_out.c and libgd_la_SOURCES in src/extra/gd/Makefile.am compiles no GIF source. libwmf uses GD only as a rasterization/output backend and never decodes GIF input. The vulnerable code is not present or reachable in this package; scanners flag it only via Debian's stale source-package match (trixie is "unimportant / unfixed" while standalone libgd2 is fixed).
| Reporter | Title | Published | Views | Family All 86 |
|---|---|---|---|---|
 | gd -- multiple vulnerabilities | 21 Jun 200700:00 | – | freebsd |
 | Debian GNU/Linux Data Compromise | 28 Apr 201500:00 | – | bdu_fstec |
| Debian GNU/Linux Data Compromise | 28 Apr 201500:00 | – | bdu_fstec |
| Debian GNU/Linux Data Compromise | 28 Apr 201500:00 | – | bdu_fstec |
| Debian GNU/Linux Data Compromise | 28 Apr 201500:00 | – | bdu_fstec |
| Gentoo Linux Remote Compromise | 28 Apr 201500:00 | – | bdu_fstec |
 | CentOS 4 / 5 : gd (CESA-2008:0146) | 29 Feb 200800:00 | – | nessus |
| Debian DSA-1613-1 : libgd2 - multiple vulnerabilities | 23 Jul 200800:00 | – | nessus |
| Fedora 7 : gd-2.0.35-1.fc7 (2007-2055) | 6 Nov 200700:00 | – | nessus |
| Fedora Core 6 : gd-2.0.35-1.fc6 (2007-692) | 24 Sep 200700:00 | – | nessus |
10
| Source | Link |
|---|---|
| advisory | www.advisory.echohq.com/cve/CVE-2007-3476 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
15 Sep 2026 03:33Current
5.7Medium risk
Vulners AI Score5.7
CVSS 24.3
EPSS0.02455