CVE-2006-2906
NoneCVSS
—
EPSS
10.4%
Published
Jun 8, 2006
CISA due date
—
The record
The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2.0.33 allows remote attackers to cause a denial of service (CPU consumption) via malformed GIF data that causes an infinite loop.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | libgd2 | 0 | 2.0.33-5 |
| Debian:11 | libgd2 | 0 | 2.0.33-5 |
| Debian:12 | libgd2 | 0 | 2.0.33-5 |
| Debian:13 | libgd2 | 0 | 2.0.33-5 |
| Debian:3.1 | libgd2 | 0 | 2.0.33-1.1sarge1 |
Related vulnerabilities
- CVE-2014-2497 The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier… Also affects libgd2
- CVE-2009-3546 The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD… Also affects libgd2
- CVE-2007-3473 The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows… Also affects libgd2
- CVE-2007-0455 Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33… Also affects libgd2
- CVE-2016-10166 Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD… Also affects libgd2
- CVE-2016-3074 Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote… Also affects libgd2
- CVE-2014-9709 The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before… Also affects libgd2
- CVE-2004-0990 Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other… Also affects libgd2