5 matches found
CVE-2004-0941
CVE-2004-0941 concerns the GD Graphics Library (libgd) with multiple buffer overflow vulnerabilities in versions up to 2.0.21 and earlier. The listed issue arises when parsing PNG/image data, where malformed image files trigger overflows during calls to gdMalloc, enabling remote attackers to pote...
CVE-2004-0990
CVE-2004-0990 describes an integer overflow in the GD Graphics Library (libgd) 2.0.28 (and possibly earlier/other versions) that can be triggered by PNG image files with large image row values. This leads to a heap-based buffer overflow in gdImageCreateFromPngCtx, enabling remote denial of servic...
CVE-2007-3475
CVE-2007-3475 affects the GD Graphics Library (libgd) before 2.0.35. A crafted GIF image with no global color map can cause a remote denial of service (crash). References from OpenVAS/Ubuntu advisories confirm the issue; remediation is to upgrade to libgd 2.0.35 or later where available.
CVE-2007-3476
CVE-2007-3476 affects libgd (GD Graphics Library). An array index error in libgd’s GIF handling (gd_gif_in.c) can be triggered by oversized color indices in crafted GIF data, leading to denial of service via crash and heap corruption (segmentation fault) on affected versions prior to 2.0.35. Impa...
CVE-2007-3478
CVE-2007-3478: In GD Graphics Library (libgd) before 2.0.35, a race condition in gdImageStringFTEx (gdft_draw_bitmap) can be triggered by user-controlled input via TTF support, leading to a denial of service (crash). Affected product: libgd (GD Graphics Library); root cause: race condition in bit...