CVE-2007-3996

Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a large 1 srcW or 2 srcH value to the a gdImageCopyResized function, or a large 3 sy height or 4 sx width value to the b...

gb and libgd library multiple security vulnerabilities

Multiple vulnerabilities on GIF parsing...

Code injection

The GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash via a GIF image that has no global color map...

CVE-2007-3473

The gdImageCreateXbm function in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash via unspecified vectors involving a gdImageCreate failure...

Design/Logic Flaw

The gdImageCreateXbm function in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash via unspecified vectors involving a gdImageCreate failure...

CVE-2007-3474

Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library libgd before 2.0.35 have unspecified impact and user-assisted remote attack vectors...

CVE-2007-3476

CVE-2007-3476 affects libgd (GD Graphics Library). An array index error in libgd’s GIF handling (gd_gif_in.c) can be triggered by oversized color indices in crafted GIF data, leading to denial of service via crash and heap corruption (segmentation fault) on affected versions prior to 2.0.35. Impa...

CVE-2007-3478

CVE-2007-3478: In GD Graphics Library (libgd) before 2.0.35, a race condition in gdImageStringFTEx (gdft_draw_bitmap) can be triggered by user-controlled input via TTF support, leading to a denial of service (crash). Affected product: libgd (GD Graphics Library); root cause: race condition in bit...

CVE-2007-3477

The a imagearc and b imagefilledarc functions in GD Graphics Library libgd before 2.0.35 allow attackers to cause a denial of service CPU consumption via a large 1 start or 2 end angle degree value...

CVE-2007-3474

Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library libgd before 2.0.35 have unspecified impact and user-assisted remote attack vectors...

CVE-2007-3477

CVE-2007-3477 affects the GD Graphics Library (libgd) prior to 2.0.35, specifically the imagearc and imagefilledarc functions. The underlying issue allows denial of service via abnormally large start or end angle values, leading to CPU exhaustion on affected hosts. The connected documents corrobo...

CVE-2007-3474

Technical details about CVE-2007-3474 are not publicly provided in the connected documents; the available description notes unspecified vulnerabilities in the GD libgd GIF reader.

CVE-2007-3473

The CVE-2007-3473 issue affects the GD Graphics Library (libgd) prior to 2.0.35, where the gdImageCreateXbm function can be triggered by a gdImageCreate failure to cause a denial of service (crash). Exploitation details in the connected documents indicate a remote, user-assisted vector, with no e...

CVE-2007-3472

CVE-2007-3472 is an integer overflow in libgd's gdImageCreateTrueColor() prior to 2.0.35. It allows user‑assisted remote attackers to have unspecified attack vectors and impact. Affected: GD Graphics Library (libgd) before 2.0.35. Mitigation: upgrade to 2.0.35 or newer (per multiple advisories). ...

CVE-2007-3475

CVE-2007-3475 affects the GD Graphics Library (libgd) before 2.0.35. A crafted GIF image with no global color map can cause a remote denial of service (crash). References from OpenVAS/Ubuntu advisories confirm the issue; remediation is to upgrade to libgd 2.0.35 or later where available.

libgd PNG DoS

Resource exhaustion on PNG parsing...

CVE-2007-2756

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

CVE-2007-2756

The CVE-2007-2756 issue affects the GD library (libgd) with version 2.0.34, where gdPngReadData can enter an infinite loop in png_read_info when processing a crafted PNG with truncated data. This leads to CPU exhaustion (DoS) and is described as user-assisted. Demonstrated vulnerability context c...

CVE-2007-2756

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

CVE-2007-2756

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...