NVD

Id
52679  
Name
CVE-2007-0455  
Description
Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-01-30  
Modified Date
2011-03-07  
Seq
2007-0455  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266192 52679 CVE-2007-0455 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=224607  View
266193 52679 CVE-2007-0455 FEDORA-2007-150  View
266194 52679 CVE-2007-0455 FEDORA-2010-19033  View
266195 52679 CVE-2007-0455 FEDORA-2010-19022  View
266196 52679 CVE-2007-0455 [security-announce] 20070208 rPSA-2007-0028-1 gd  View
266197 52679 CVE-2007-0455 oval:org.mitre.oval:def:11303  View
266198 52679 CVE-2007-0455 RHSA-2007:0155  View
266199 52679 CVE-2007-0455 MDKSA-2007:035  View
266200 52679 CVE-2007-0455 MDKSA-2007:036  View
266201 52679 CVE-2007-0455 MDKSA-2007:038  View
266202 52679 CVE-2007-0455 MDKSA-2007:109  View
266203 52679 CVE-2007-0455 RHSA-2007:0153  View
266204 52679 CVE-2007-0455 RHSA-2007:0162  View
266205 52679 CVE-2007-0455 RHSA-2008:0146  View
266206 52679 CVE-2007-0455 20070418 rPSA-2007-0073-1 php php-mysql php-pgsql  View
266207 52679 CVE-2007-0455 22289  View
266208 52679 CVE-2007-0455 2007-0007  View
266209 52679 CVE-2007-0455 USN-473-1  View
266210 52679 CVE-2007-0455 ADV-2007-0400  View
266211 52679 CVE-2007-0455 ADV-2011-0022  View
266212 52679 CVE-2007-0455 https://issues.rpath.com/browse/RPL-1030  View
266213 52679 CVE-2007-0455 https://issues.rpath.com/browse/RPL-1268  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51441 JVNDB-2007-000103 GD ライブラリの gdImageStringFTEx() 関数におけるバッファオーバーフローの脆弱性 GD ライブラリの gdft.c における gdImageStringFTEx() 関数には、JIS エンコードされたフォントの文字列の取り扱いに不備が存在するため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-0455 23810 CVE-2007-0455 52679 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000103.html 2007-01-30 2008-04-15 View