CVEvulnerability
CVE-2007-0455
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-01-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-120
Description
Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.
Affected configurations
• gd graphics library project gd graphics library (<= 2.0.33)
• php php (>= 4.4.0 < 4.4.7)
• canonical ubuntu linux 6.06
• canonical ubuntu linux 6.10
• canonical ubuntu linux 7.04
• fedoraproject fedora 13
• fedoraproject fedora 14
• redhat enterprise linux desktop 3.0
• redhat enterprise linux desktop 4.0
• redhat enterprise linux server 3.0
• redhat enterprise linux server 4.0
• redhat enterprise linux workstation 3.0
• redhat enterprise linux workstation 4.0
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=224607 Issue Tracking, Third Party Advisory
- http://fedoranews.org/cms/node/2631 Broken Link
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html Mailing List, Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html Mailing List, Third Party Advisory
- http://lists.rpath.com/pipermail/security-announce/2007-February/000145.html Broken Link
- http://rhn.redhat.com/errata/RHSA-2007-0155.html Third Party Advisory
- http://secunia.com/advisories/23916 Not Applicable, Vendor Advisory
- http://secunia.com/advisories/24022 Not Applicable
- http://secunia.com/advisories/24052 Not Applicable
- http://secunia.com/advisories/24053 Not Applicable
- http://secunia.com/advisories/24107 Not Applicable
- http://secunia.com/advisories/24143 Not Applicable
- http://secunia.com/advisories/24151 Not Applicable
- http://secunia.com/advisories/24924 Not Applicable
- http://secunia.com/advisories/24945 Not Applicable
- http://secunia.com/advisories/24965 Not Applicable
- http://secunia.com/advisories/25575 Not Applicable
- http://secunia.com/advisories/29157 Not Applicable
- http://secunia.com/advisories/42813 Not Applicable
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:035 Broken Link
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:036 Broken Link
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:038 Broken Link
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:109 Broken Link
- http://www.redhat.com/support/errata/RHSA-2007-0153.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2007-0162.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0146.html Third Party Advisory
- http://www.securityfocus.com/archive/1/466166/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/22289 Third Party Advisory, VDB Entry
- http://www.trustix.org/errata/2007/0007 Broken Link
- http://www.ubuntu.com/usn/usn-473-1 Third Party Advisory
- http://www.vupen.com/english/advisories/2007/0400 Permissions Required
- http://www.vupen.com/english/advisories/2011/0022 Permissions Required
- https://issues.rpath.com/browse/RPL-1030 Broken Link
- https://issues.rpath.com/browse/RPL-1268 Broken Link
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11303 Third Party Advisory
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=224607 Issue Tracking, Third Party Advisory
- http://fedoranews.org/cms/node/2631 Broken Link
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html Mailing List, Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html Mailing List, Third Party Advisory
- http://lists.rpath.com/pipermail/security-announce/2007-February/000145.html Broken Link
- http://rhn.redhat.com/errata/RHSA-2007-0155.html Third Party Advisory
- http://secunia.com/advisories/23916 Not Applicable, Vendor Advisory
- http://secunia.com/advisories/24022 Not Applicable
- http://secunia.com/advisories/24052 Not Applicable
- http://secunia.com/advisories/24053 Not Applicable
- http://secunia.com/advisories/24107 Not Applicable
- http://secunia.com/advisories/24143 Not Applicable
- http://secunia.com/advisories/24151 Not Applicable
- http://secunia.com/advisories/24924 Not Applicable
- http://secunia.com/advisories/24945 Not Applicable
- http://secunia.com/advisories/24965 Not Applicable
- http://secunia.com/advisories/25575 Not Applicable
- http://secunia.com/advisories/29157 Not Applicable
- http://secunia.com/advisories/42813 Not Applicable
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:035 Broken Link
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:036 Broken Link
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:038 Broken Link
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:109 Broken Link
- http://www.redhat.com/support/errata/RHSA-2007-0153.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2007-0162.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0146.html Third Party Advisory
- http://www.securityfocus.com/archive/1/466166/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/22289 Third Party Advisory, VDB Entry
- http://www.trustix.org/errata/2007/0007 Broken Link
- http://www.ubuntu.com/usn/usn-473-1 Third Party Advisory
- http://www.vupen.com/english/advisories/2007/0400 Permissions Required
- http://www.vupen.com/english/advisories/2011/0022 Permissions Required
- https://issues.rpath.com/browse/RPL-1030 Broken Link
- https://issues.rpath.com/browse/RPL-1268 Broken Link
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11303 Third Party Advisory