Description
Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault.
CVSS vector
AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9Confidentiality: None
Integrity: None
Affected Packages3 packages
▶Debianlibgd2< 2.0.35.dfsg-1+3 🔴Vulnerability Details
3GHSAGHSA-3mpq-f59x-83gx: Array index error in gd_gif_in↗2022-05-03 OSVCVE-2007-3476: Array index error in gd_gif_in↗2007-06-28 CVEListCVE-2007-3476: Array index error in gd_gif_in↗2007-06-28 📋Vendor Advisories
3UbuntuGD library vulnerabilities↗2009-11-05 Red Hatlibgd Denial of service by corrupted GIF images↗2007-06-21 DebianCVE-2007-3476: libgd2 - Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.3...↗2007 💬Community
4BugzillaEmbeds vulnerable version of gd prone to many CVEs↗2010-12-05 BugzillaCVE-2007-3476 libgd Denial of service by corrupted GIF images↗2007-09-04 BugzillaCVE-2007-3472 CVE-2007-3473 CVE-2007-3474 CVE-2007-3475 CVE-2007-3476 CVE-2007-3477 CVE-2007-3478 gd various flaws [FC6]↗2007-09-04 BugzillaCVE-2007-3472 CVE-2007-3473 CVE-2007-3474 CVE-2007-3475 CVE-2007-3476 CVE-2007-3477 CVE-2007-3478 gd various flaws [F7]↗2007-09-04