Description
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.
CVSS vector
AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9Complexity: Low
Confidentiality: None
Integrity: None
Affected Packages5 packages
🔴Vulnerability Details
2GHSAGHSA-rw88-xg62-qv59: The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2↗2022-05-03 OSVCVE-2007-3477: The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2↗2007-06-28 📋Vendor Advisories
3UbuntuGD library vulnerabilities↗2009-11-05 Red Hatgd: arc drawing functions can consume large amount of CPU time↗2007-06-21 DebianCVE-2007-3477: libgd2 - The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd)...↗2007 💬Community
4BugzillaEmbeds vulnerable version of gd prone to many CVEs↗2010-12-05 BugzillaCVE-2007-3477 gd: arc drawing functions can consume large amount of CPU time↗2007-09-04 BugzillaCVE-2007-3472 CVE-2007-3473 CVE-2007-3474 CVE-2007-3475 CVE-2007-3476 CVE-2007-3477 CVE-2007-3478 gd various flaws [FC6]↗2007-09-04 BugzillaCVE-2007-3472 CVE-2007-3473 CVE-2007-3474 CVE-2007-3475 CVE-2007-3476 CVE-2007-3477 CVE-2007-3478 gd various flaws [F7]↗2007-09-04