PT-2007-1092 · Libgd+1 · Gd Graphics Library+1
Publicado
2007-06-28
·
Atualizado
2018-10-16
·
CVE-2007-3472
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions:
GD Graphics Library (libgd) versions prior to 2.0.35
Description:
The issue is related to an integer overflow in the
gdImageCreateTrueColor function, which can be exploited by remote attackers. This may lead to unspecified attack vectors and impact. Additionally, there are multiple vulnerabilities in the GD package that can be exploited remotely, potentially disrupting the availability of protected information.Recommendations:
For versions prior to 2.0.35, update to version 2.0.35 or later to resolve the issue.
As a temporary workaround, consider restricting access to the
gdImageCreateTrueColor function until a patch is available.Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gd Graphics Library
Red Hat