CVE-2007-3474 — GD Graphics Library vulnerability

7 documents4 sources

Severity

2.6LOWNVD

EPSS

6.3%

top 9.01%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Libgd GD Graphics Library

Timeline

PublishedJun 28

Latest updateMay 3

Description

Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2.0.35 have unspecified impact and user-assisted remote attack vectors.

CVSS vector

AV:N/AC:H/C:N/I:N/A:PExploitability: 4.9 | Impact: 2.9

Affected Packages1 packages

▶NVDlibgd/gd_graphics_library2.0.35+3

Patches

Patch: www.libgd.org ↗Patch: www.libgd.org ↗

🔴Vulnerability Details

GHSA

GHSA-f9px-3m6f-669r: Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2↗2022-05-03

▶

📋Vendor Advisories

Red Hat

libgd Denial of service and reentrancy fixes in GIF code↗2007-06-21

▶

💬Community

Bugzilla

Embeds vulnerable version of gd prone to many CVEs↗2010-12-05

▶

Bugzilla

CVE-2007-3472 CVE-2007-3473 CVE-2007-3474 CVE-2007-3475 CVE-2007-3476 CVE-2007-3477 CVE-2007-3478 gd various flaws [FC6]↗2007-09-04

▶

Bugzilla

CVE-2007-3472 CVE-2007-3473 CVE-2007-3474 CVE-2007-3475 CVE-2007-3476 CVE-2007-3477 CVE-2007-3478 gd various flaws [F7]↗2007-09-04

▶

Bugzilla

CVE-2007-3474 libgd Denial of service and reentrancy fixes in GIF code↗2007-09-04

▶