Red Hat Security AdvisoryRHSA-2008:0146
gd security update
Released 2008-02-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) gd-2.0.33-9.4.el5_1.1, gd-2.0.33-9.4.el5_1.1.i386, gd-2.0.33-9.4.el5_1.1.ia64 +9
- Red Hat Enterprise Linux AS version 4 gd-2.0.28-5.4E.el4_6.1, gd-2.0.28-5.4E.el4_6.1.i386, gd-2.0.28-5.4E.el4_6.1.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) gd-2.0.33-9.4.el5_1.1, gd-2.0.33-9.4.el5_1.1.i386, gd-progs-2.0.33-9.4.el5_1.1 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) gd-2.0.33-9.4.el5_1.1, gd-devel-2.0.33-9.4.el5_1.1, gd-devel-2.0.33-9.4.el5_1.1.i386
- Red Hat Enterprise Linux Desktop version 4 gd-2.0.28-5.4E.el4_6.1, gd-2.0.28-5.4E.el4_6.1.i386, gd-devel-2.0.28-5.4E.el4_6.1 +3
- Red Hat Enterprise Linux ES version 4 gd-2.0.28-5.4E.el4_6.1, gd-2.0.28-5.4E.el4_6.1.i386, gd-2.0.28-5.4E.el4_6.1.ia64 +6
- Red Hat Enterprise Linux WS version 4 gd-2.0.28-5.4E.el4_6.1, gd-2.0.28-5.4E.el4_6.1.i386, gd-2.0.28-5.4E.el4_6.1.ia64 +6
Fixes 7 records
Priority MEDIUM 47
Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a cra…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.12257 · Published 2007-01-30 · Partial fix CWE-120
Priority LOW 35
The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.13311 · Published 2007-06-28 · Partial fix
Priority LOW 30
Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to have unspecified attack vectors and impact.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.07319 · Published 2007-06-28 · Partial fix CWE-189
Priority LOW 27
The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info fun…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04267 · Published 2007-05-18 · Partial fix
Priority LOW 25
Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted ima…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02455 · Published 2007-06-28 · Fixed CWE-189
Priority LOW 25
The GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via a GIF image that has no global color map.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02452 · Published 2007-06-28 · Fixed
Priority LOW 25
Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.08676 · Published 2006-08-31 · Fixed
THREATIST.IORead the docs