Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2007-3475

libgd Denial of service by GIF images without a global color map

The GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via a GIF image that has no global color map.

CVSS 2.0 · 4.3 Medium EPSS 2.5% KEV · Not listed
Vendors
Gd Graphics Library Redhat
Products
Gdlib Enterprise Linux
CVE-2007-3476

libgd Denial of service by corrupted GIF images

Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault.

CVSS 2.0 · 4.3 Medium EPSS 2.5% KEV · Not listed
Vendors
Gd Graphics Library Redhat
Products
Gdlib Enterprise Linux
CVE-2007-3478

libgd Certain TTF handling routines are not reentrant

Race condition in gdImageStringFTEx (gdft_draw_bitmap) in gdft.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors, possibly involving truetype font (TTF) support.

CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Gd Graphics Library
Products
Gdlib
CVE-2004-0941

gd: additional overflows

Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.

CVSS 2.0 · 10.0 Critical EPSS 10.7% KEV · Not listed
Vendors
Gd Graphics Library Redhat Trustix
Products
Gdlib Enterprise Linux Secure Linux
CVE-2004-0990

security flaw

Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.

CVSS 2.0 · 10.0 Critical EPSS 28.3% KEV · Not listed
Vendors
Gd Graphics Library Gentoo Openpkg and 3 more
Products
Gdlib Linux Openpkg and 3 more