Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.3
CVE-2007-3476: GD Graphics Library before 2.0.35 can crash from crafted GIF
CVE-2007-3476 · published 19 years ago
Summary
The GD graphics library used by several Debian packages (including libwmf, rootio-libwmf, libgd2, and Racket) mishandles certain GIF image data, leading to a crash and possible memory corruption. An attacker who can get a user to open a specially crafted image could make the application stop working. Apply the latest library updates from your distribution to fix the problem.
What to do
- Update debian libwmf to version 0.2.12-5.1.aikido.7.
- Update debian rootio-libwmf to version 0.2.12-5.1.aikido.7.
- Update debian libgd2 to version 2.0.35.dfsg-1.
- Update debian racket to version 5.0.2-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Debian:12 | debian | libwmf |
< 0.2.12-5.1.aikido.7 Fix: upgrade to 0.2.12-5.1.aikido.7
|
| Root:Debian:12 | debian | rootio-libwmf |
< 0.2.12-5.1.aikido.7 Fix: upgrade to 0.2.12-5.1.aikido.7
|
| Debian:12 | debian | libgd2 |
< 2.0.35.dfsg-1 Fix: upgrade to 2.0.35.dfsg-1
|
| Debian:13 | debian | libgd2 |
< 2.0.35.dfsg-1 Fix: upgrade to 2.0.35.dfsg-1
|
| Debian:14 | debian | libgd2 |
< 2.0.35.dfsg-1 Fix: upgrade to 2.0.35.dfsg-1
|
| Debian:12 | debian | libwmf | All versions |
| Debian:13 | debian | libwmf | All versions |
| Debian:14 | debian | libwmf | All versions |
| Debian:12 | debian | racket |
< 5.0.2-1 Fix: upgrade to 5.0.2-1
|
| Debian:13 | debian | racket |
< 5.0.2-1 Fix: upgrade to 5.0.2-1
|
| Debian:14 | debian | racket |
< 5.0.2-1 Fix: upgrade to 5.0.2-1
|
| – | gd_graphics_library | gdlib |
<= 2.0.34 cpe:2.3:a:gd_graphics_library:gdlib:*:*:*:*:*:*:*:* |
Original advisory text
Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color inde...
Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault.
References
- https://security-tracker.debian.org/tracker/CVE-2007-3476 Vendor Advisory
- http://bugs.libgd.org/?do=details&task_id=87
- http://fedoranews.org/updates/FEDORA-2007-205.shtml
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.ht...
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.ht...
- http://osvdb.org/37741
- http://secunia.com/advisories/25860
- http://secunia.com/advisories/26272
- http://secunia.com/advisories/26390
- http://secunia.com/advisories/26415
- http://secunia.com/advisories/26467
- http://secunia.com/advisories/26663
- http://secunia.com/advisories/26766
- http://secunia.com/advisories/26856
- http://secunia.com/advisories/29157
- http://secunia.com/advisories/30168
- http://secunia.com/advisories/31168
- http://secunia.com/advisories/42813
- http://security.gentoo.org/glsa/glsa-200708-05.xml
- http://security.gentoo.org/glsa/glsa-200711-34.xml
- http://security.gentoo.org/glsa/glsa-200805-13.xml
- http://www.debian.org/security/2008/dsa-1613
- http://www.libgd.org/ReleaseNote020035 Patch
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:153
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:164
- http://www.novell.com/linux/security/advisories/2007_15_sr.html
- http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.h...
- http://www.redhat.com/support/errata/RHSA-2008-0146.html
- http://www.securityfocus.com/archive/1/478796/100/0/threaded
- http://www.securityfocus.com/bid/24651
- http://www.trustix.org/errata/2007/0024/
- http://www.vupen.com/english/advisories/2011/0022
- https://bugzilla.redhat.com/show_bug.cgi?id=277421
- https://issues.rpath.com/browse/RPL-1643
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3...
Severity
4.3
Medium
Type
CWE-189Numeric Errors
Timeline
Published28 Jun 2007
Updated29 Oct 2026
First seen29 Aug 2026
Track software like this
Free during beta