Published: 28/06/2007 Updated: 16/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Subscribe to Gdlib

The GD Graphics Library (libgd) prior to 2.0.35 allows user-assisted remote malicious users to cause a denial of service (crash) via a GIF image that has no global color map.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gd graphics library gdlib

Tomas Hoger discovered that the GD library did not properly handle the number of colors in certain malformed GD images If a user or automated system were tricked into processing a specially crafted GD image, an attacker could cause a denial of service or possibly execute arbitrary code (CVE-2009-3546) ...

NVD-CWE-Other http://www.libgd.org/ReleaseNote020035 http://bugs.libgd.org/?do=details&task_id=70 ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz https://issues.rpath.com/browse/RPL-1643 https://bugzilla.redhat.com/show_bug.cgi?id=277421 http://fedoranews.org/updates/FEDORA-2007-205.shtml http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.html http://security.gentoo.org/glsa/glsa-200708-05.xml http://security.gentoo.org/glsa/glsa-200711-34.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:153 http://www.mandriva.com/security/advisories?name=MDKSA-2007:164 http://www.novell.com/linux/security/advisories/2007_15_sr.html http://www.trustix.org/errata/2007/0024/http://www.securityfocus.com/bid/24651 http://secunia.com/advisories/25860 http://secunia.com/advisories/26272 http://secunia.com/advisories/26390 http://secunia.com/advisories/26415 http://secunia.com/advisories/26467 http://secunia.com/advisories/26663 http://secunia.com/advisories/26766 http://secunia.com/advisories/26856 http://www.redhat.com/support/errata/RHSA-2008-0146.html http://secunia.com/advisories/29157 http://security.gentoo.org/glsa/glsa-200805-13.xml http://secunia.com/advisories/30168 http://www.vupen.com/english/advisories/2011/0022 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html http://secunia.com/advisories/42813 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9728 http://www.securityfocus.com/archive/1/478796/100/0/threaded https://usn.ubuntu.com/854-1/https://nvd.nist.gov

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook