CVE-2007-0455

Published: Jan 30, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.

Affected (13)

Products: Gd Graphics Library Project: Gd Graphics Library · Php: Php · Canonical: Ubuntu Linux · +2 more

Show all products

Gd Graphics Library Project: Gd Graphics Library · Php: Php · Canonical: Ubuntu Linux · Fedoraproject: Fedora · Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Workstation

Gd Graphics Library Project

1 product

1 product

1 product

1 product

3 products

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Workstation

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gd Graphics Library Project Gd Graphics Library	Up to 2.0.33

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Php Php	From 4.4.0 to 4.4.7

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10
Canonical Ubuntu Linux	Version 7.04

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 13
Fedoraproject Fedora	Version 14

Configuration E

6 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 3.0
Redhat Enterprise Linux Desktop	Version 4.0
Redhat Enterprise Linux Server	Version 3.0
Redhat Enterprise Linux Server	Version 4.0
Redhat Enterprise Linux Workstation	Version 3.0
Redhat Enterprise Linux Workstation	Version 4.0

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (70)

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=224607

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

http://fedoranews.org/cms/node/2631

Source: secalert@redhat.com

Broken Link

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.rpath.com/pipermail/security-announce/2007-February/000145.html

Source: secalert@redhat.com

Broken Link

http://rhn.redhat.com/errata/RHSA-2007-0155.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/23916

Source: secalert@redhat.com

Not ApplicableVendor Advisory

http://secunia.com/advisories/24022

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/24052

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/24053

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/24107

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/24143

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/24151

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/24924

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/24945

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/24965

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/25575

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/29157

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/42813

Source: secalert@redhat.com

Not Applicable

http://www.mandriva.com/security/advisories?name=MDKSA-2007:035

Source: secalert@redhat.com

Broken Link

http://www.mandriva.com/security/advisories?name=MDKSA-2007:036

Source: secalert@redhat.com

Broken Link

http://www.mandriva.com/security/advisories?name=MDKSA-2007:038

Source: secalert@redhat.com

Broken Link

http://www.mandriva.com/security/advisories?name=MDKSA-2007:109

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2007-0153.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0162.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0146.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/466166/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/22289

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.trustix.org/errata/2007/0007

Source: secalert@redhat.com

Broken Link

http://www.ubuntu.com/usn/usn-473-1

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2007/0400

Source: secalert@redhat.com

Permissions Required

http://www.vupen.com/english/advisories/2011/0022

Source: secalert@redhat.com

Permissions Required

https://issues.rpath.com/browse/RPL-1030

Source: secalert@redhat.com

Broken Link

https://issues.rpath.com/browse/RPL-1268

Source: secalert@redhat.com

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11303

Source: secalert@redhat.com

Third Party Advisory

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=224607