The gd package contains a graphics library used for the dynamic creation of images such as PNG and JPEG.
Several buffer overflow flaws were found in the way gd allocates memory. An attacker could create a carefully crafted image that could execute arbitrary code if opened by a victim using a program linked against the gd library. The Common Vulnerabilities and Exposures project (cve.mitre.org) assigned the name CVE-2004-0941 to these issues.
Users of gd should upgrade to these updated packages, which contain a backported patch and is not vulnerable to these issues.