Vulnerability Name:

CVE-2007-3476 (CCN-35415)

Assigned:2007-06-21
Published:2007-06-21
Updated:2018-10-16
Summary:Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault.
CVSS v3 Severity:3.7 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.2 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
2.6 Low (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P)
1.9 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-189
Vulnerability Consequences:Denial of Service
References:Source: CONFIRM
Type: UNKNOWN
ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz

Source: CCN
Type: libgd Bug FS#87
fix segfault when an invalid color index is present in the image data

Source: CONFIRM
Type: UNKNOWN
http://bugs.libgd.org/?do=details&task_id=87

Source: MITRE
Type: CNA
CVE-2007-3476

Source: FEDORA
Type: UNKNOWN
FEDORA-2007-2055

Source: FEDORA
Type: UNKNOWN
FEDORA-2010-19033

Source: FEDORA
Type: UNKNOWN
FEDORA-2010-19022

Source: OSVDB
Type: UNKNOWN
37741

Source: CCN
Type: RHSA-2008-0146
Moderate: gd security update

Source: SECUNIA
Type: UNKNOWN
25860

Source: SECUNIA
Type: UNKNOWN
26272

Source: SECUNIA
Type: UNKNOWN
26390

Source: SECUNIA
Type: UNKNOWN
26415

Source: SECUNIA
Type: UNKNOWN
26467

Source: SECUNIA
Type: UNKNOWN
26663

Source: SECUNIA
Type: UNKNOWN
26766

Source: SECUNIA
Type: UNKNOWN
26856

Source: SECUNIA
Type: UNKNOWN
29157

Source: SECUNIA
Type: UNKNOWN
30168

Source: SECUNIA
Type: UNKNOWN
31168

Source: SECUNIA
Type: UNKNOWN
42813

Source: GENTOO
Type: UNKNOWN
GLSA-200708-05

Source: GENTOO
Type: UNKNOWN
GLSA-200711-34

Source: GENTOO
Type: UNKNOWN
GLSA-200805-13

Source: CCN
Type: ASA-2008-099
gd security update (RHSA-2008-0146)

Source: DEBIAN
Type: UNKNOWN
DSA-1613

Source: DEBIAN
Type: DSA-1613
libgd2 -- multiple vulnerabilities

Source: CCN
Type: GLSA-200708-05
GD: Multiple vulnerabilities

Source: CCN
Type: GLSA-200711-34
CSTeX: Multiple vulnerabilities

Source: CCN
Type: GLSA-200805-13
PTeX: Multiple vulnerabilities

Source: CCN
Type: GD Graphics Library Web site
ReleaseNote020035

Source: MISC
Type: Patch
http://www.libgd.org/ReleaseNote020035

Source: MANDRIVA
Type: UNKNOWN
MDKSA-2007:153

Source: MANDRIVA
Type: UNKNOWN
MDKSA-2007:164

Source: SUSE
Type: UNKNOWN
SUSE-SR:2007:015

Source: CCN
Type: OSVDB ID: 37741
GD Graphics Library (libgd) gd_gif_in.c Image Handling DoS

Source: FEDORA
Type: UNKNOWN
FEDORA-2007-692

Source: REDHAT
Type: UNKNOWN
RHSA-2008:0146

Source: BUGTRAQ
Type: UNKNOWN
20070907 FLEA-2007-0052-1 gd

Source: BID
Type: UNKNOWN
24651

Source: CCN
Type: BID-24651
GD Graphics Library Multiple Vulnerabilities

Source: TRUSTIX
Type: UNKNOWN
2007-0024

Source: CCN
Type: USN-854-1
GD library vulnerabilities

Source: VUPEN
Type: UNKNOWN
ADV-2011-0022

Source: CONFIRM
Type: UNKNOWN
https://bugzilla.redhat.com/show_bug.cgi?id=277421

Source: XF
Type: UNKNOWN
gd-gdgifin-dos(35415)

Source: CONFIRM
Type: UNKNOWN
https://issues.rpath.com/browse/RPL-1643

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:10348

Source: SUSE
Type: SUSE-SR:2007:015
SUSE Security Summary Report

Vulnerable Configuration:Configuration 1:
  • cpe:/a:gd_graphics_library:gdlib:*:*:*:*:*:*:*:* (Version <= 2.0.34)

    • Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

    • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

    • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

    • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

    • Configuration RedHat 6:
  • cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

    • Configuration RedHat 7:
  • cpe:/o:redhat:enterprise_linux:5::client:*:*:*:*:*

    • Configuration RedHat 8:
  • cpe:/o:redhat:enterprise_linux:5::client_workstation:*:*:*:*:*

    • Configuration RedHat 9:
  • cpe:/o:redhat:enterprise_linux:5::server:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20073476
    V
    		CVE-2007-3476
    2015-11-16
    oval:org.mitre.oval:def:13910
    P
    		USN-854-1 -- libgd2 vulnerabilities
    2014-06-30
    oval:org.mitre.oval:def:18418
    P
    		DSA-1613-1 libgd2 - multiple vulnerabilities
    2014-06-23
    oval:org.mitre.oval:def:7842
    P
    		DSA-1613 libgd2 -- multiple vulnerabilities
    2014-06-23
    oval:org.mitre.oval:def:21803
    P
    		ELSA-2008:0146: gd security update (Moderate)
    2014-05-26
    oval:org.mitre.oval:def:10348
    V
    		Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault.
    2013-04-29
    oval:org.debian:def:1613
    V
    		multiple vulnerabilities
    2008-07-22
    oval:com.redhat.rhsa:def:20080146
    P
    		RHSA-2008:0146: gd security update (Moderate)
    2008-02-28
    BACK
    gd_graphics_library gdlib *