PT-2007-1092 · Libgd+1 · Gd Graphics Library+1

Published 2007-06-28 · Updated 2018-10-16 · CVE-2007-3472

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: GD Graphics Library (libgd) versions prior to 2.0.35

Description: The issue is related to an integer overflow in the gdImageCreateTrueColor function, which can be exploited by remote attackers. This may lead to unspecified attack vectors and impact. Additionally, there are multiple vulnerabilities in the GD package that can be exploited remotely, potentially disrupting the availability of protected information.

Recommendations: For versions prior to 2.0.35, update to version 2.0.35 or later to resolve the issue. As a temporary workaround, consider restricting access to the gdImageCreateTrueColor function until a patch is available.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

BDU:2015-09579

CVE-2007-3472

RHSA-2008:0146

RHSA-2008_0146

Affected Products

Gd Graphics Library

Red Hat

References · 56

• https://bdu.fstec.ru/vul/2015-03087 · Security Note
• https://bdu.fstec.ru/vul/2015-03089 · Security Note
• http://secunia.com/advisories/29157 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03090 · Security Note
• http://secunia.com/advisories/26272 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200805-13.xml · Vendor Advisory
• http://secunia.com/advisories/26856 · Vendor Advisory
• http://fedoranews.org/updates/FEDORA-2007-205.shtml · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200708-05.xml · Vendor Advisory
• http://secunia.com/advisories/26663 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-3472 · Vendor Advisory
• http://secunia.com/advisories/42813 · Vendor Advisory
• http://secunia.com/advisories/25860 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200711-34.xml · Vendor Advisory
• http://trustix.org/errata/2007/0024 · Vendor Advisory