PT-2007-1091 · Gd+3 · Libgd+3

Published 2007-05-18 · Updated 2024-06-15 · CVE-2007-2756

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: libgd versions 2.0.34 and earlier libgd version prior to 2.0.35

Description: The issue allows attackers to cause a denial of service, specifically CPU consumption, via a crafted PNG image with truncated data. This can lead to an infinite loop in the png read info function in libpng. Multiple vulnerabilities in the gd package can be exploited remotely, potentially disrupting the availability of protected information.

Recommendations: For libgd versions 2.0.34 and earlier, update to version 2.0.35 or later to resolve the issue. For libgd version prior to 2.0.35, update to version 2.0.35 or later to resolve the issue. As a temporary workaround, consider restricting the use of the gdPngReadData function until a patch is available.

Exploit

Fix

Related Identifiers

BDU:2015-09579

CVE-2007-2756

DSA-1613-1

HPSBUX02262

OPENSUSE-SU-2024:10777-1

RHSA-2007:0889

RHSA-2007:0890

RHSA-2007:0891

RHSA-2007_0890

RHSA-2008:0146

RHSA-2008_0146

Affected Products

Hp-Ux

Red Hat

Libgd

Libpng

References · 124

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/apache_modjk_overflow.rb · Exploit
• https://bdu.fstec.ru/vul/2015-03089 · Security Note
• http://openpkg.com/security/advisories/OpenPKG-SA-2007.020.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2007-0889.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2007-September/msg00397.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3386 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2007:122 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1860 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5752 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2756 · Security Note
• https://osv.dev/vulnerability/CVE-2007-2756 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2872 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2007-2756 · Vendor Advisory