NetSight
high7.5

CVE-2007-0455

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (app…

Impact

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.

Affected products

VendorProductAffected versions
Gd Graphics Library ProjectGd Graphics Library
through 2.0.33
PhpPhp
from 4.4.0 before 4.4.7
CanonicalUbuntu Linux
Versions 6.06, 6.10, 7.04
FedoraprojectFedora
Versions 13, 14
RedhatEnterprise Linux Desktop
Versions 3.0, 4.0
RedhatEnterprise Linux Server
Versions 3.0, 4.0
RedhatEnterprise Linux Workstation
Versions 3.0, 4.0

Weakness classification

References