CVE-2007-3473
NoneCVSS
—
EPSS
13.3%
Published
Jun 28, 2007
CISA due date
—
The record
The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | libgd2 | 0 | 2.0.35.dfsg-1 |
| Debian:11 | libgd2 | 0 | 2.0.35.dfsg-1 |
| Debian:12 | libgd2 | 0 | 2.0.35.dfsg-1 |
| Debian:13 | libgd2 | 0 | 2.0.35.dfsg-1 |
| Red Hat:enterprise_linux:4::as | gd | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::as | gd-debuginfo | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::as | gd-devel | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::as | gd-progs | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | gd | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | gd-debuginfo | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | gd-devel | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | gd-progs | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::es | gd | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::es | gd-debuginfo | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::es | gd-devel | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::es | gd-progs | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | gd | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | gd-debuginfo | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | gd-devel | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | gd-progs | 0 | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat:enterprise_linux:5::client | gd | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::client | gd-debuginfo | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::client | gd-devel | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::client | gd-progs | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | gd | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | gd-debuginfo | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | gd-devel | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | gd-progs | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::server | gd | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::server | gd-debuginfo | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::server | gd-devel | 0 | 0:2.0.33-9.4.el5_1.1 |
| Red Hat:enterprise_linux:5::server | gd-progs | 0 | 0:2.0.33-9.4.el5_1.1 |
Related vulnerabilities
- CVE-2014-2497 The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier… Also affects libgd2
- CVE-2009-3546 The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD… Also affects libgd2
- CVE-2007-0455 Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33… Also affects libgd2
- CVE-2006-2906 The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics… Also affects libgd2
- CVE-2017-6362 Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows… Also affects libgd2
- CVE-2017-7890 The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics… Also affects libgd2
- CVE-2016-10166 Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD… Also affects libgd2
- CVE-2016-6911 The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows… Also affects libgd2