CVE-2007-0455
NoneCVSS
—
EPSS
12.0%
Published
Jan 30, 2007
CISA due date
—
The record
Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | libgd2 | 0 | 2.0.35.dfsg-1 |
| Debian:11 | libgd2 | 0 | 2.0.35.dfsg-1 |
| Debian:12 | libgd2 | 0 | 2.0.35.dfsg-1 |
| Debian:13 | libgd2 | 0 | 2.0.35.dfsg-1 |
| Debian:14 | libgd2 | 0 | 2.0.35.dfsg-1 |
| Debian:4.0 | libgd2 | 0 | 2.0.33-5.2etch2 |
| Debian:5.0 | libgd2 | 0 | 2.0.36~rc1~dfsg-3+lenny1 |
| Red Hat:enterprise_linux:3::as | php | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::as | php-debuginfo | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::as | php-devel | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::as | php-imap | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::as | php-ldap | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::as | php-mysql | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::as | php-odbc | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::as | php-pgsql | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::desktop | php | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::desktop | php-debuginfo | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::desktop | php-devel | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::desktop | php-imap | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::desktop | php-ldap | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::desktop | php-mysql | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::desktop | php-odbc | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::desktop | php-pgsql | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::es | php | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::es | php-debuginfo | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::es | php-devel | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::es | php-imap | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::es | php-ldap | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::es | php-mysql | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::es | php-odbc | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::es | php-pgsql | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::ws | php | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::ws | php-debuginfo | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::ws | php-devel | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::ws | php-imap | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::ws | php-ldap | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::ws | php-mysql | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::ws | php-odbc | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::ws | php-pgsql | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:4::as | gd | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::as | gd-debuginfo | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::as | gd-devel | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::as | gd-progs | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::as | php | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-debuginfo | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-devel | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-domxml | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-gd | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-imap | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-ldap | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-mbstring | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-mysql | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-ncurses | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-odbc | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-pear | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-pgsql | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-snmp | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-xmlrpc | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | gd | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | gd-debuginfo | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | gd-devel | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | gd-progs | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | php | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-debuginfo | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-devel | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-domxml | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-gd | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-imap | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-ldap | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-mbstring | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-mysql | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-ncurses | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-odbc | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-pear | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-pgsql | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-snmp | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-xmlrpc | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | gd | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::es | gd-debuginfo | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::es | gd-devel | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::es | gd-progs | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::es | php | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-debuginfo | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-devel | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-domxml | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-gd | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-imap | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-ldap | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-mbstring | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-mysql | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-ncurses | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-odbc | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-pear | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-pgsql | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-snmp | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-xmlrpc | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | gd | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | gd-debuginfo | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | gd-devel | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | gd-progs | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | php | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-debuginfo | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-devel | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-domxml | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-gd | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-imap | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-ldap | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-mbstring | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-mysql | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-ncurses | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-odbc | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-pear | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-pgsql | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-snmp | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-xmlrpc | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:5::client | gd | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::client | gd-debuginfo | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::client | gd-devel | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::client | gd-progs | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | gd | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | gd-debuginfo | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | gd-devel | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | gd-progs | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | php | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-bcmath | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-cli | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-common | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-dba | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-debuginfo | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-devel | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-gd | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-imap | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-ldap | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-mbstring | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-mysql | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-ncurses | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-odbc | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-pdo | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-pgsql | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-snmp | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-soap | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-xml | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-xmlrpc | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | gd | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::server | gd-debuginfo | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::server | gd-devel | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::server | gd-progs | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::server | php | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-bcmath | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-cli | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-common | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-dba | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-debuginfo | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-devel | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-gd | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-imap | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-ldap | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-mbstring | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-mysql | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-ncurses | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-odbc | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-pdo | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-pgsql | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-snmp | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-soap | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-xml | 0 | 0:5.1.6-11.el5 |
| Red Hat:enterprise_linux:5::server | php-xmlrpc | 0 | 0:5.1.6-11.el5 |
| Red Hat:rhel_application_stack:1 | php | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-bcmath | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-cli | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-common | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-dba | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-debuginfo | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-devel | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-gd | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-imap | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-ldap | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-mbstring | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-mysql | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-ncurses | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-odbc | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-pdo | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-pgsql | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-snmp | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-soap | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-xml | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-xmlrpc | 0 | 0:5.1.6-3.el4s1.6 |
Related vulnerabilities
- CVE-2014-2497 The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier… Also affects libgd2
- CVE-2009-3546 The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD… Also affects libgd2
- CVE-2007-3473 The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows… Also affects libgd2
- CVE-2006-2906 The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics… Also affects libgd2
- CVE-2016-10166 Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD… Also affects libgd2
- CVE-2016-3074 Integer signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote… Also affects libgd2
- CVE-2014-9709 The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before… Also affects libgd2
- CVE-2004-0990 Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other… Also affects libgd2