Lucene search
+L

644 matches found

CVE
CVE
•added 2007/06/28 6:00 p.m.•134 views

CVE-2007-3477

CVE-2007-3477 affects the GD Graphics Library (libgd) prior to 2.0.35, specifically the imagearc and imagefilledarc functions. The underlying issue allows denial of service via abnormally large start or end angle values, leading to CPU exhaustion on affected hosts. The connected documents corrobo...

5CVSS6.1AI score0.04857EPSS
SaveExploits1References33Affected Software1
Debian CVE
Debian CVE
•added 2007/06/28 6:00 p.m.•41 views

CVE-2007-3477

The a imagearc and b imagefilledarc functions in GD Graphics Library libgd before 2.0.35 allow attackers to cause a denial of service CPU consumption via a large 1 start or 2 end angle degree value...

5CVSS6.2AI score0.04857EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/28 12:00 a.m.•7 views

CVE-2007-3475: Undefined Security Weakness

The GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash via a GIF image that has no global color map...

4.3CVSS5.8AI score0.02452EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/28 12:00 a.m.•5 views

CVE-2007-3476: Undefined Security Weakness

Array index error in gdgifin.c in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash and heap corruption via large color index values in crafted image data, which results in a segmentation fault...

4.3CVSS5.9AI score0.02455EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/28 12:00 a.m.•9 views

CVE-2007-3478: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in gdImageStringFTEx gdftdrawbitmap in gdft.c in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash via unspecified vectors, possibly involving truetype font TTF support...

4.3CVSS5.9AI score0.01721EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/28 12:00 a.m.•7 views

CVE-2007-3473: Undefined Security Weakness

The gdImageCreateXbm function in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash via unspecified vectors involving a gdImageCreate failure...

4.3CVSS6AI score0.13311EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/28 12:00 a.m.•6 views

CVE-2007-3474: Undefined Security Weakness

Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library libgd before 2.0.35 have unspecified impact and user-assisted remote attack vectors...

2.6CVSS5.8AI score0.02538EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/28 12:00 a.m.•6 views

CVE-2007-3477: Undefined Security Weakness

The a imagearc and b imagefilledarc functions in GD Graphics Library libgd before 2.0.35 allow attackers to cause a denial of service CPU consumption via a large 1 start or 2 end angle degree value...

5CVSS6AI score0.04857EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/28 12:00 a.m.•7 views

CVE-2007-3472: Undefined Security Weakness

Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to have unspecified attack vectors and impact...

4.3CVSS6.1AI score0.07319EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2007/06/14 12:00 a.m.•61 views

libgd PNG DoS

Resource exhaustion on PNG parsing...

4.3CVSS2.8AI score0.04267EPSS
SaveExploits0References1Affected Software5
osv_cve
osv_cve
•added 2007/05/18 6:30 p.m.•17 views

CVE-2007-2756

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

6.1AI score0.04267EPSS
SaveExploits0References62
Cvelist
Cvelist
•added 2007/05/18 6:00 p.m.•46 views

CVE-2007-2756

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

6AI score0.04267EPSS
SaveExploits0References62
Mend
Mend
•added 2007/05/18 6:00 p.m.•4 views

CVE-2007-2756

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

6.3CVSS0.04267EPSS
SaveExploits0References64
CVE
CVE
•added 2007/05/18 6:00 p.m.•148 views

CVE-2007-2756

The CVE-2007-2756 issue affects the GD library (libgd) with version 2.0.34, where gdPngReadData can enter an infinite loop in png_read_info when processing a crafted PNG with truncated data. This leads to CPU exhaustion (DoS) and is described as user-assisted. Demonstrated vulnerability context c...

4.3CVSS6.1AI score0.04267EPSS
SaveExploits0References62Affected Software1
Debian CVE
Debian CVE
•added 2007/05/18 6:00 p.m.•38 views

CVE-2007-2756

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

4.3CVSS6.1AI score0.04267EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/05/18 12:00 a.m.•7 views

CVE-2007-2756: Undefined Security Weakness

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

4.3CVSS5.9AI score0.04267EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2007/04/08 12:00 a.m.•59 views

PHP <= 5.2.1 wbmp file handling integer overflow

There is an integer overflow in PHP in ext/gd/libgd/wbmp.c in the function readwbmp. If large enough values are specified for wbmp image height and/or width, so that widthheight 2^32, an integer overflow occurs on the following line if wbmp-bitmap = int safeemallocwbmp-width wbmp-height, sizeofin...

6.8CVSS7.6AI score0.08321EPSS
SaveExploits2
Cvelist
Cvelist
•added 2007/04/06 12:00 a.m.•39 views

CVE-2007-1001

Multiple integer overflows in the 1 createwbmp and 2 readwbmp functions in wbmp.c in the GD library libgd in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap WBMP images with large width or height values...

7.8AI score0.08321EPSS
SaveExploits2References35
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/04/06 12:00 a.m.•8 views

CVE-2007-1001: Undefined Security Weakness

Multiple integer overflows in the 1 createwbmp and 2 readwbmp functions in wbmp.c in the GD library libgd in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap WBMP images with large width or height values...

6.8CVSS6.5AI score0.08321EPSS
SaveExploits2References2
securityvulns
securityvulns
•added 2007/01/31 12:00 a.m.•69 views

libgd graphics library code execution

JIS fonts parsing problem in gdImageStringFTEx function...

7.5CVSS4.9AI score0.11953EPSS
SaveExploits0Affected Software2
Rows per page
Query Builder