Remote Yes

Type Arbitrary code execution

Description

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.

AVG-16 libwmf 0.2.8.4-13 0.2.8.4-14 Critical Fixed FS#49162

01 Jan 2017 ASA-201701-1 AVG-16 libwmf Critical multiple issues