PT-2007-1094 · Gd · Gd Graphics Library

Published 2007-06-28 · Updated 2018-10-16 · CVE-2007-3474

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: GD Graphics Library versions prior to 2.0.35

Description: The issue concerns multiple unspecified vulnerabilities in the GIF reader of the GD Graphics Library. These vulnerabilities can be exploited remotely and may lead to unspecified impact, potentially disrupting the availability of protected information.

Recommendations: For versions prior to 2.0.35, update to version 2.0.35 or later to resolve the issue. As a temporary workaround, consider restricting access to the GIF reader functionality in the GD Graphics Library until a patch is applied.

Fix

Related Identifiers

BDU:2015-09579

CVE-2007-3474

Affected Products

Gd Graphics Library

References · 34

• http://secunia.com/advisories/26272 · Vendor Advisory
• http://secunia.com/advisories/26856 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200805-13.xml · Vendor Advisory
• http://fedoranews.org/updates/FEDORA-2007-205.shtml · Vendor Advisory
• http://secunia.com/advisories/26663 · Vendor Advisory
• http://secunia.com/advisories/42813 · Vendor Advisory
• http://secunia.com/advisories/25860 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200711-34.xml · Vendor Advisory
• http://libgd.org/ReleaseNote020035 · Patch
• http://security.gentoo.org/glsa/glsa-200708-05.xml · Vendor Advisory
• http://trustix.org/errata/2007/0024 · Vendor Advisory
• http://secunia.com/advisories/30168 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0022 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:164 · Vendor Advisory
• http://secunia.com/advisories/26415 · Vendor Advisory