PT-2007-1094 · Gd · Gd Graphics Library

Publicado 2007-06-28 · Atualizado 2018-10-16 · CVE-2007-3474

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: GD Graphics Library versions prior to 2.0.35

Description: The issue concerns multiple unspecified vulnerabilities in the GIF reader of the GD Graphics Library. These vulnerabilities can be exploited remotely and may lead to unspecified impact, potentially disrupting the availability of protected information.

Recommendations: For versions prior to 2.0.35, update to version 2.0.35 or later to resolve the issue. As a temporary workaround, consider restricting access to the GIF reader functionality in the GD Graphics Library until a patch is applied.

Correção

Identificadores relacionados

BDU:2015-09579

CVE-2007-3474

Produtos afetados

Gd Graphics Library

Referências · 34

• http://osvdb.org/37743 · Nota
• http://securityfocus.com/archive/1/478796/100/0/threaded · Nota
• http://secunia.com/advisories/26272 · Aviso do Fabricante
• http://secunia.com/advisories/26856 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200805-13.xml · Aviso do Fabricante
• http://fedoranews.org/updates/FEDORA-2007-205.shtml · Aviso do Fabricante
• https://altsp.su/obnovleniya-bezopasnosti · Nota
• http://secunia.com/advisories/26663 · Aviso do Fabricante
• http://secunia.com/advisories/42813 · Aviso do Fabricante
• http://secunia.com/advisories/25860 · Aviso do Fabricante
• http://securityfocus.com/bid/24651 · Nota
• http://security.gentoo.org/glsa/glsa-200711-34.xml · Aviso do Fabricante
• http://libgd.org/ReleaseNote020035 · Correção
• https://bugzilla.redhat.com/show_bug.cgi?id=277421 · Nota
• http://security.gentoo.org/glsa/glsa-200708-05.xml · Aviso do Fabricante