DEBIAN-CVE-2007-3996

Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a large 1 srcW or 2 srcH value to the a gdImageCopyResized function, or a large 3 sy height or 4 sx width value to the b...

CVE-2007-3996

Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a large 1 srcW or 2 srcH value to the a gdImageCopyResized function, or a large 3 sy height or 4 sx width value to the b...

Integer overflow

Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a large 1 srcW or 2 srcH value to the a gdImageCopyResized function, or a large 3 sy height or 4 sx width value to the b...

CVE-2007-3996

Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a large 1 srcW or 2 srcH value to the a gdImageCopyResized function, or a large 3 sy height or 4 sx width value to the b...

CVE-2007-3996

Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a large 1 srcW or 2 srcH value to the a gdImageCopyResized function, or a large 3 sy height or 4 sx width value to the b...

CVE-2007-3996

CVE-2007-3996 is a confirmed libgd2 vulnerability discussed in connected advisories. The issue is described as multiple integer overflows in libgd’s image resizing and creation routines, which can cause an application crash and may allow arbitrary code execution when processing large values (srcW...

gb and libgd library multiple security vulnerabilities

Multiple vulnerabilities on GIF parsing...

Code injection

The GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash via a GIF image that has no global color map...

Design/Logic Flaw

The gdImageCreateXbm function in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash via unspecified vectors involving a gdImageCreate failure...

CVE-2007-3473

The gdImageCreateXbm function in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash via unspecified vectors involving a gdImageCreate failure...

CVE-2007-3474

Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library libgd before 2.0.35 have unspecified impact and user-assisted remote attack vectors...

CVE-2007-3477

The a imagearc and b imagefilledarc functions in GD Graphics Library libgd before 2.0.35 allow attackers to cause a denial of service CPU consumption via a large 1 start or 2 end angle degree value...

CVE-2007-3478

CVE-2007-3478: In GD Graphics Library (libgd) before 2.0.35, a race condition in gdImageStringFTEx (gdft_draw_bitmap) can be triggered by user-controlled input via TTF support, leading to a denial of service (crash). Affected product: libgd (GD Graphics Library); root cause: race condition in bit...

CVE-2007-3476

CVE-2007-3476 affects libgd (GD Graphics Library). An array index error in libgd’s GIF handling (gd_gif_in.c) can be triggered by oversized color indices in crafted GIF data, leading to denial of service via crash and heap corruption (segmentation fault) on affected versions prior to 2.0.35. Impa...

CVE-2007-3474

Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library libgd before 2.0.35 have unspecified impact and user-assisted remote attack vectors...

CVE-2007-3477

CVE-2007-3477 affects the GD Graphics Library (libgd) prior to 2.0.35, specifically the imagearc and imagefilledarc functions. The underlying issue allows denial of service via abnormally large start or end angle values, leading to CPU exhaustion on affected hosts. The connected documents corrobo...

CVE-2007-3474

Technical details about CVE-2007-3474 are not publicly provided in the connected documents; the available description notes unspecified vulnerabilities in the GD libgd GIF reader.

CVE-2007-3473

The CVE-2007-3473 issue affects the GD Graphics Library (libgd) prior to 2.0.35, where the gdImageCreateXbm function can be triggered by a gdImageCreate failure to cause a denial of service (crash). Exploitation details in the connected documents indicate a remote, user-assisted vector, with no e...

CVE-2007-3475

CVE-2007-3475 affects the GD Graphics Library (libgd) before 2.0.35. A crafted GIF image with no global color map can cause a remote denial of service (crash). References from OpenVAS/Ubuntu advisories confirm the issue; remediation is to upgrade to libgd 2.0.35 or later where available.

CVE-2007-3472

CVE-2007-3472 is an integer overflow in libgd's gdImageCreateTrueColor() prior to 2.0.35. It allows user‑assisted remote attackers to have unspecified attack vectors and impact. Affected: GD Graphics Library (libgd) before 2.0.35. Mitigation: upgrade to 2.0.35 or newer (per multiple advisories). ...