CVE
- Id
- 23812
- CVE No.
- CVE-2007-0455
- Status
- Candidate
- Description
- Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.
- Phase
- Assigned (20070123)
- Votes
- None (candidate not yet proposed)
- Comments
Related CVE References
| Id | CVE Id | CVE No. | Reference | Actions |
|---|---|---|---|---|
| 231534 | 23812 | CVE-2007-0455 | BUGTRAQ:20070418 rPSA-2007-0073-1 php php-mysql php-pgsql | View |
| 231535 | 23812 | CVE-2007-0455 | URL:http://www.securityfocus.com/archive/1/archive/1/466166/100/0/threaded | View |
| 231536 | 23812 | CVE-2007-0455 | MLIST:[security-announce] 20070208 rPSA-2007-0028-1 gd | View |
| 231537 | 23812 | CVE-2007-0455 | URL:http://lists.rpath.com/pipermail/security-announce/2007-February/000145.html | View |
| 231538 | 23812 | CVE-2007-0455 | CONFIRM:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=224607 | View |
| 231539 | 23812 | CVE-2007-0455 | CONFIRM:https://issues.rpath.com/browse/RPL-1030 | View |
| 231540 | 23812 | CVE-2007-0455 | CONFIRM:https://issues.rpath.com/browse/RPL-1268 | View |
| 231541 | 23812 | CVE-2007-0455 | FEDORA:FEDORA-2007-150 | View |
| 231542 | 23812 | CVE-2007-0455 | URL:http://fedoranews.org/cms/node/2631 | View |
| 231543 | 23812 | CVE-2007-0455 | FEDORA:FEDORA-2010-19022 | View |
| 231544 | 23812 | CVE-2007-0455 | URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html | View |
| 231545 | 23812 | CVE-2007-0455 | FEDORA:FEDORA-2010-19033 | View |
| 231546 | 23812 | CVE-2007-0455 | URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html | View |
| 231547 | 23812 | CVE-2007-0455 | MANDRIVA:MDKSA-2007:035 | View |
| 231548 | 23812 | CVE-2007-0455 | URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:035 | View |
| 231549 | 23812 | CVE-2007-0455 | MANDRIVA:MDKSA-2007:036 | View |
| 231550 | 23812 | CVE-2007-0455 | URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:036 | View |
| 231551 | 23812 | CVE-2007-0455 | MANDRIVA:MDKSA-2007:038 | View |
| 231552 | 23812 | CVE-2007-0455 | URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:038 | View |
| 231553 | 23812 | CVE-2007-0455 | MANDRIVA:MDKSA-2007:109 | View |
| 231554 | 23812 | CVE-2007-0455 | URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:109 | View |
| 231555 | 23812 | CVE-2007-0455 | REDHAT:RHSA-2007:0155 | View |
| 231556 | 23812 | CVE-2007-0455 | URL:http://rhn.redhat.com/errata/RHSA-2007-0155.html | View |
| 231557 | 23812 | CVE-2007-0455 | REDHAT:RHSA-2007:0153 | View |
| 231558 | 23812 | CVE-2007-0455 | URL:http://www.redhat.com/support/errata/RHSA-2007-0153.html | View |
| 231559 | 23812 | CVE-2007-0455 | REDHAT:RHSA-2007:0162 | View |
| 231560 | 23812 | CVE-2007-0455 | URL:http://www.redhat.com/support/errata/RHSA-2007-0162.html | View |
| 231561 | 23812 | CVE-2007-0455 | REDHAT:RHSA-2008:0146 | View |
| 231562 | 23812 | CVE-2007-0455 | URL:http://www.redhat.com/support/errata/RHSA-2008-0146.html | View |
| 231563 | 23812 | CVE-2007-0455 | TRUSTIX:2007-0007 | View |
| 231564 | 23812 | CVE-2007-0455 | URL:http://www.trustix.org/errata/2007/0007 | View |
| 231565 | 23812 | CVE-2007-0455 | UBUNTU:USN-473-1 | View |
| 231566 | 23812 | CVE-2007-0455 | URL:http://www.ubuntu.com/usn/usn-473-1 | View |
| 231567 | 23812 | CVE-2007-0455 | BID:22289 | View |
| 231568 | 23812 | CVE-2007-0455 | URL:http://www.securityfocus.com/bid/22289 | View |
| 231569 | 23812 | CVE-2007-0455 | OVAL:oval:org.mitre.oval:def:11303 | View |
| 231570 | 23812 | CVE-2007-0455 | URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11303 | View |
| 231571 | 23812 | CVE-2007-0455 | SECUNIA:42813 | View |
| 231572 | 23812 | CVE-2007-0455 | URL:http://secunia.com/advisories/42813 | View |
| 231573 | 23812 | CVE-2007-0455 | VUPEN:ADV-2007-0400 | View |
| 231574 | 23812 | CVE-2007-0455 | URL:http://www.vupen.com/english/advisories/2007/0400 | View |
| 231575 | 23812 | CVE-2007-0455 | SECUNIA:23916 | View |
| 231576 | 23812 | CVE-2007-0455 | URL:http://secunia.com/advisories/23916 | View |
| 231577 | 23812 | CVE-2007-0455 | SECUNIA:24022 | View |
| 231578 | 23812 | CVE-2007-0455 | URL:http://secunia.com/advisories/24022 | View |
| 231579 | 23812 | CVE-2007-0455 | SECUNIA:24052 | View |
| 231580 | 23812 | CVE-2007-0455 | URL:http://secunia.com/advisories/24052 | View |
| 231581 | 23812 | CVE-2007-0455 | SECUNIA:24053 | View |
| 231582 | 23812 | CVE-2007-0455 | URL:http://secunia.com/advisories/24053 | View |
| 231583 | 23812 | CVE-2007-0455 | SECUNIA:24107 | View |
| 231584 | 23812 | CVE-2007-0455 | URL:http://secunia.com/advisories/24107 | View |
| 231585 | 23812 | CVE-2007-0455 | SECUNIA:24143 | View |
| 231586 | 23812 | CVE-2007-0455 | URL:http://secunia.com/advisories/24143 | View |
| 231587 | 23812 | CVE-2007-0455 | SECUNIA:24151 | View |
| 231588 | 23812 | CVE-2007-0455 | URL:http://secunia.com/advisories/24151 | View |
| 231589 | 23812 | CVE-2007-0455 | SECUNIA:24924 | View |
| 231590 | 23812 | CVE-2007-0455 | URL:http://secunia.com/advisories/24924 | View |
| 231591 | 23812 | CVE-2007-0455 | SECUNIA:24965 | View |
| 231592 | 23812 | CVE-2007-0455 | URL:http://secunia.com/advisories/24965 | View |
| 231593 | 23812 | CVE-2007-0455 | SECUNIA:24945 | View |
| 231594 | 23812 | CVE-2007-0455 | URL:http://secunia.com/advisories/24945 | View |
| 231595 | 23812 | CVE-2007-0455 | SECUNIA:25575 | View |
| 231596 | 23812 | CVE-2007-0455 | URL:http://secunia.com/advisories/25575 | View |
| 231597 | 23812 | CVE-2007-0455 | SECUNIA:29157 | View |
| 231598 | 23812 | CVE-2007-0455 | URL:http://secunia.com/advisories/29157 | View |
| 231599 | 23812 | CVE-2007-0455 | VUPEN:ADV-2011-0022 | View |
Related JVN
| Id | JVN No. | Title | Summary | CVE No. | CVE Id | CVSS_v2 | CVSS_v3 | JVN URL | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 51549 | JVNDB-2007-000211 | Wireshark の IEEE 802.11 解析部におけるサービス運用妨害 (DoS) の脆弱性 | Wireshark (旧名:Ethereal) には、IEEE 802.11 解析部の不備によりクラッシュする脆弱性が存在します。 | CVE-2007-0457 | 23812 | 2.9 | http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000211.html | View |