Lucene search

PRIOn knowledge basePRION:CVE-2007-3474

HistoryJun 28, 2007 - 6:30 p.m.

Design/Logic Flaw

2007-06-2818:30:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.01 Low

EPSS

Percentile

82.8%

JSON

Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2.0.35 have unspecified impact and user-assisted remote attack vectors.

CPENameOperatorVersion
gd_graphics_libraryeq2.0.34 rc2
gd_graphics_libraryeq2.0.33
gd_graphics_libraryeq2.0.34 rc1
gd_graphics_libraryeq2.0.35 rc3
gd_graphics_libraryeq2.0.35 rc2
gd_graphics_libraryeq2.0.35 rc1
gd_graphics_libraryle2.0.35
gd_graphics_libraryeq2.0.34
gd_graphics_libraryeq2.0.35 rc4

Name	Operator	Version
gd_graphics_library	eq	2.0.34 rc2
gd_graphics_library	eq	2.0.33
gd_graphics_library	eq	2.0.34 rc1
gd_graphics_library	eq	2.0.35 rc3
gd_graphics_library	eq	2.0.35 rc2
gd_graphics_library	eq	2.0.35 rc1
gd_graphics_library	le	2.0.35
gd_graphics_library	eq	2.0.34
gd_graphics_library	eq	2.0.35 rc4

References

ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz

fedoranews.org/updates/FEDORA-2007-205.shtml

osvdb.org/37743

secunia.com/advisories/25855

secunia.com/advisories/25860

secunia.com/advisories/26272

secunia.com/advisories/26390

secunia.com/advisories/26415

secunia.com/advisories/26467

secunia.com/advisories/26663

secunia.com/advisories/26766

secunia.com/advisories/26856

secunia.com/advisories/30168

secunia.com/advisories/42813

security.gentoo.org/glsa/glsa-200708-05.xml

security.gentoo.org/glsa/glsa-200711-34.xml

security.gentoo.org/glsa/glsa-200805-13.xml

www.libgd.org/ReleaseNote020035

www.mandriva.com/security/advisories?name=MDKSA-2007:153

www.mandriva.com/security/advisories?name=MDKSA-2007:164

www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.html

www.securityfocus.com/archive/1/478796/100/0/threaded

www.securityfocus.com/bid/24651

www.trustix.org/errata/2007/0024/

www.vupen.com/english/advisories/2007/2336

www.vupen.com/english/advisories/2011/0022

bugzilla.redhat.com/show_bug.cgi?id=277421

exchange.xforce.ibmcloud.com/vulnerabilities/35110

issues.rpath.com/browse/RPL-1643

lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html

lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html

7.1 High

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.01 Low

EPSS

Percentile

82.8%

JSON

Related for PRION:CVE-2007-3474