The GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via a GIF image that has no global color map.

Subscriptions

Vendors Products
Gd Graphics Library Subscribe
Enterprise Linux Subscribe

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Ubuntu USN Ubuntu USN USN-854-1 GD library vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

References
Link Providers
ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz cve-icon cve-icon
http://bugs.libgd.org/?do=details&task_id=70 cve-icon cve-icon
http://fedoranews.org/updates/FEDORA-2007-205.shtml cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html cve-icon cve-icon
http://secunia.com/advisories/25860 cve-icon cve-icon
http://secunia.com/advisories/26272 cve-icon cve-icon
http://secunia.com/advisories/26390 cve-icon cve-icon
http://secunia.com/advisories/26415 cve-icon cve-icon
http://secunia.com/advisories/26467 cve-icon cve-icon
http://secunia.com/advisories/26663 cve-icon cve-icon
http://secunia.com/advisories/26766 cve-icon cve-icon
http://secunia.com/advisories/26856 cve-icon cve-icon
http://secunia.com/advisories/29157 cve-icon cve-icon
http://secunia.com/advisories/30168 cve-icon cve-icon
http://secunia.com/advisories/42813 cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200708-05.xml cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200711-34.xml cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200805-13.xml cve-icon cve-icon
http://www.libgd.org/ReleaseNote020035 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDKSA-2007:153 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDKSA-2007:164 cve-icon cve-icon
http://www.novell.com/linux/security/advisories/2007_15_sr.html cve-icon cve-icon
http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0146.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/478796/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/24651 cve-icon cve-icon
http://www.trustix.org/errata/2007/0024/ cve-icon cve-icon
http://www.vupen.com/english/advisories/2011/0022 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=277421 cve-icon cve-icon
https://issues.rpath.com/browse/RPL-1643 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2007-3475 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9728 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2007-3475 cve-icon
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-07T14:21:35.760Z

Reserved: 2007-06-28T00:00:00.000Z

Link: CVE-2007-3475

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2007-06-28T18:30:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-3475

cve-icon Redhat

Severity : Low

Publid Date: 2007-06-21T00:00:00Z

Links: CVE-2007-3475 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses