7.5

CVE-2007-0455

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Php ≫ Php Version >= 4.4.0 < 4.4.7
Canonical ≫ Ubuntu Linux Version6.06
Canonical ≫ Ubuntu Linux Version6.10
Canonical ≫ Ubuntu Linux Version7.04
Fedoraproject ≫ Fedora Version13
Fedoraproject ≫ Fedora Version14
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 11.69% 0.955
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

http://secunia.com/advisories/29157
Not Applicable
http://www.redhat.com/support/errata/RHSA-2008-0146.html
Third Party Advisory
http://secunia.com/advisories/24022
Not Applicable
http://www.mandriva.com/security/advisories?name=MDKSA-2007:038
Broken Link
http://secunia.com/advisories/24151
Not Applicable
http://www.trustix.org/errata/2007/0007
Broken Link
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=224607
Third Party Advisory
Issue Tracking
http://fedoranews.org/cms/node/2631
Broken Link
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html
Third Party Advisory
Mailing List
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html
Third Party Advisory
Mailing List
http://lists.rpath.com/pipermail/security-announce/2007-February/000145.html
Broken Link
http://rhn.redhat.com/errata/RHSA-2007-0155.html
Third Party Advisory
http://secunia.com/advisories/23916
Vendor Advisory
Not Applicable
http://secunia.com/advisories/24052
Not Applicable
http://secunia.com/advisories/24053
Not Applicable
http://secunia.com/advisories/24107
Not Applicable
http://secunia.com/advisories/24143
Not Applicable
http://secunia.com/advisories/24924
Not Applicable
http://secunia.com/advisories/24945
Not Applicable
http://secunia.com/advisories/24965
Not Applicable
http://secunia.com/advisories/25575
Not Applicable
http://secunia.com/advisories/42813
Not Applicable
http://www.mandriva.com/security/advisories?name=MDKSA-2007:035
Broken Link
http://www.mandriva.com/security/advisories?name=MDKSA-2007:036
Broken Link
http://www.mandriva.com/security/advisories?name=MDKSA-2007:109
Broken Link
http://www.redhat.com/support/errata/RHSA-2007-0153.html
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0162.html
Third Party Advisory
http://www.securityfocus.com/archive/1/466166/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/22289
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/usn-473-1
Third Party Advisory
http://www.vupen.com/english/advisories/2007/0400
Permissions Required
http://www.vupen.com/english/advisories/2011/0022
Permissions Required
https://issues.rpath.com/browse/RPL-1030
Broken Link
https://issues.rpath.com/browse/RPL-1268
Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11303
Third Party Advisory