CVE-2007-0455

CVE-2007-0455

Published · Updated

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 12%
exploitation probability
12%top 4% of all CVEs
observed exploitation
nono source reports it
Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.
Affected products
n/a · n/a
References
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=224607http://fedoranews.org/cms/node/2631http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.htmlhttp://lists.rpath.com/pipermail/security-announce/2007-February/000145.htmlhttp://rhn.redhat.com/errata/RHSA-2007-0155.htmlhttp://secunia.com/advisories/23916http://secunia.com/advisories/24022http://secunia.com/advisories/24052http://secunia.com/advisories/24053http://secunia.com/advisories/24107http://secunia.com/advisories/24143