NVD

Id
55627  
Name
CVE-2007-3476  
Description
Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-06-28  
Modified Date
2012-10-30  
Seq
2007-3476  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
282888 55627 CVE-2007-3476 ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz  View
282889 55627 CVE-2007-3476 http://bugs.libgd.org/?do=details&task_id=87  View
282890 55627 CVE-2007-3476 FEDORA-2007-2055  View
282891 55627 CVE-2007-3476 FEDORA-2010-19033  View
282892 55627 CVE-2007-3476 FEDORA-2010-19022  View
282893 55627 CVE-2007-3476 oval:org.mitre.oval:def:10348  View
282894 55627 CVE-2007-3476 GLSA-200708-05  View
282895 55627 CVE-2007-3476 GLSA-200711-34  View
282896 55627 CVE-2007-3476 GLSA-200805-13  View
282897 55627 CVE-2007-3476 DSA-1613  View
282898 55627 CVE-2007-3476 http://www.libgd.org/ReleaseNote020035  View
282899 55627 CVE-2007-3476 MDKSA-2007:153  View
282900 55627 CVE-2007-3476 MDKSA-2007:164  View
282901 55627 CVE-2007-3476 SUSE-SR:2007:015  View
282902 55627 CVE-2007-3476 FEDORA-2007-692  View
282903 55627 CVE-2007-3476 RHSA-2008:0146  View
282904 55627 CVE-2007-3476 20070907 FLEA-2007-0052-1 gd  View
282905 55627 CVE-2007-3476 24651  View
282906 55627 CVE-2007-3476 2007-0024  View
282907 55627 CVE-2007-3476 ADV-2011-0022  View
282908 55627 CVE-2007-3476 https://bugzilla.redhat.com/show_bug.cgi?id=277421  View
282909 55627 CVE-2007-3476 https://issues.rpath.com/browse/RPL-1643  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52445 JVNDB-2007-001137 libgd の gd_gif_in.c におけるサービス運用妨害 (DoS) の脆弱性 GD Graphics Library (libgd) の gd_gif_in.c には、配列インデックスエラーによる、画像ファイルのカラーインデックス値の取り扱いに不備があり、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-3476 26831 CVE-2007-3476 55627 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001137.html 2007-06-28 2008-04-15 View