644 matches found
CVE-2007-3478
Race condition in gdImageStringFTEx gdftdrawbitmap in gdft.c in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash via unspecified vectors, possibly involving truetype font TTF support...
CVE-2007-3473
The CVE-2007-3473 issue affects the GD Graphics Library (libgd) prior to 2.0.35, where the gdImageCreateXbm function can be triggered by a gdImageCreate failure to cause a denial of service (crash). Exploitation details in the connected documents indicate a remote, user-assisted vector, with no e...
CVE-2007-3475: Undefined Security Weakness
The GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash via a GIF image that has no global color map...
CVE-2007-3473: Undefined Security Weakness
The gdImageCreateXbm function in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash via unspecified vectors involving a gdImageCreate failure...
CVE-2007-3478: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in gdImageStringFTEx gdftdrawbitmap in gdft.c in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash via unspecified vectors, possibly involving truetype font TTF support...
CVE-2007-3472: Undefined Security Weakness
Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to have unspecified attack vectors and impact...
CVE-2007-3476: Undefined Security Weakness
Array index error in gdgifin.c in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash and heap corruption via large color index values in crafted image data, which results in a segmentation fault...
CVE-2007-3477: Undefined Security Weakness
The a imagearc and b imagefilledarc functions in GD Graphics Library libgd before 2.0.35 allow attackers to cause a denial of service CPU consumption via a large 1 start or 2 end angle degree value...
CVE-2007-3474: Undefined Security Weakness
Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library libgd before 2.0.35 have unspecified impact and user-assisted remote attack vectors...
libgd PNG DoS
Resource exhaustion on PNG parsing...
CVE-2007-2756
The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...
CVE-2007-2756
The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...
CVE-2007-2756
The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...
CVE-2007-2756
The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...
CVE-2007-2756
The CVE-2007-2756 issue affects the GD library (libgd) with version 2.0.34, where gdPngReadData can enter an infinite loop in png_read_info when processing a crafted PNG with truncated data. This leads to CPU exhaustion (DoS) and is described as user-assisted. Demonstrated vulnerability context c...
CVE-2007-2756: Undefined Security Weakness
The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...
PHP <= 5.2.1 wbmp file handling integer overflow
There is an integer overflow in PHP in ext/gd/libgd/wbmp.c in the function readwbmp. If large enough values are specified for wbmp image height and/or width, so that widthheight 2^32, an integer overflow occurs on the following line if wbmp-bitmap = int safeemallocwbmp-width wbmp-height, sizeofin...
CVE-2007-1001: Undefined Security Weakness
Multiple integer overflows in the 1 createwbmp and 2 readwbmp functions in wbmp.c in the GD library libgd in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap WBMP images with large width or height values...
CVE-2007-1001
Multiple integer overflows in the 1 createwbmp and 2 readwbmp functions in wbmp.c in the GD library libgd in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap WBMP images with large width or height values...