CVE-2007-0455
Fixed in a distro release EPSS 12%
Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.
Products: gd_graphics_library_project gd_graphics_library, php, canonical ubuntu_linux, fedoraproject fedora, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | libwmf | 0.2.8.4-14 |
| Debian 12 | libgd2 | 2.0.35.dfsg-1 |
| Debian 13 | libgd2 | 2.0.35.dfsg-1 |
| Debian 14 | libgd2 | 2.0.35.dfsg-1 |
| Debian 4.0 | libgd2 | 2.0.33-5.2etch2 |
| Debian 5.0 | libgd2 | 2.0.36~rc1~dfsg-3+lenny1 |
| Red Hat Enterprise Linux 3 | php | 0:4.3.2-40.ent |
| Red Hat Enterprise Linux 3 | php-debuginfo | 0:4.3.2-40.ent |
| Red Hat Enterprise Linux 3 | php-devel | 0:4.3.2-40.ent |
| Red Hat Enterprise Linux 3 | php-imap | 0:4.3.2-40.ent |
| Red Hat Enterprise Linux 3 | php-ldap | 0:4.3.2-40.ent |
| Red Hat Enterprise Linux 3 | php-mysql | 0:4.3.2-40.ent |
| Red Hat Enterprise Linux 3 | php-odbc | 0:4.3.2-40.ent |
| Red Hat Enterprise Linux 3 | php-pgsql | 0:4.3.2-40.ent |
| Red Hat Enterprise Linux 4 | gd | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat Enterprise Linux 4 | gd-debuginfo | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat Enterprise Linux 4 | gd-devel | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat Enterprise Linux 4 | gd-progs | 0:2.0.28-5.4E.el4_6.1 |
| Red Hat Enterprise Linux 4 | php | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-debuginfo | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-devel | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-domxml | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-gd | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-imap | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-ldap | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-mbstring | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-mysql | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-ncurses | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-odbc | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-pear | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-pgsql | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-snmp | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 4 | php-xmlrpc | 0:4.3.9-3.22.4 |
| Red Hat Enterprise Linux 5 | gd | 0:2.0.33-9.4.el5_1.1 |
| Red Hat Enterprise Linux 5 | gd-debuginfo | 0:2.0.33-9.4.el5_1.1 |
| Red Hat Enterprise Linux 5 | gd-devel | 0:2.0.33-9.4.el5_1.1 |
| Red Hat Enterprise Linux 5 | gd-progs | 0:2.0.33-9.4.el5_1.1 |
| Red Hat Enterprise Linux 5 | php | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-bcmath | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-cli | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-common | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-dba | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-debuginfo | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-devel | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-gd | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-imap | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-ldap | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-mbstring | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-mysql | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-ncurses | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-odbc | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-pdo | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-pgsql | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-snmp | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-soap | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-xml | 0:5.1.6-11.el5 |
| Red Hat Enterprise Linux 5 | php-xmlrpc | 0:5.1.6-11.el5 |
| Red Hat rhel application stack 1 | php | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-bcmath | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-cli | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-common | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-dba | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-debuginfo | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-devel | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-gd | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-imap | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-ldap | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-mbstring | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-mysql | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-ncurses | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-odbc | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-pdo | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-pgsql | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-snmp | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-soap | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-xml | 0:5.1.6-3.el4s1.6 |
| Red Hat rhel application stack 1 | php-xmlrpc | 0:5.1.6-3.el4s1.6 |