| Vulnerability Name: | CVE-2007-3477 (CCN-35416) | ||||||||||||||||||||||||
| Assigned: | 2007-04-14 | ||||||||||||||||||||||||
| Published: | 2007-04-14 | ||||||||||||||||||||||||
| Updated: | 2018-10-16 | ||||||||||||||||||||||||
| Summary: | The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value. | ||||||||||||||||||||||||
| CVSS v3 Severity: | 3.7 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
| ||||||||||||||||||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P) 3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
1.9 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
| ||||||||||||||||||||||||
| Vulnerability Type: | CWE-399 | ||||||||||||||||||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||||||||||||||||||
| References: | Source: CONFIRM Type: Patch ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz Source: CCN Type: libgd Bug FS#74 imagefilledarc can take a lot of CPU Source: CONFIRM Type: Exploit http://bugs.libgd.org/?do=details&task_id=74 Source: CCN Type: libgd Bug FS#92 imagearc/imagefilledarc DoS fix problem Source: CONFIRM Type: UNKNOWN http://bugs.libgd.org/?do=details&task_id=92 Source: MITRE Type: CNA CVE-2007-3477 Source: FEDORA Type: UNKNOWN FEDORA-2007-2055 Source: FEDORA Type: UNKNOWN FEDORA-2010-19033 Source: FEDORA Type: UNKNOWN FEDORA-2010-19022 Source: OSVDB Type: UNKNOWN 42062 Source: SECUNIA Type: Vendor Advisory 25860 Source: SECUNIA Type: Vendor Advisory 26272 Source: SECUNIA Type: Vendor Advisory 26390 Source: SECUNIA Type: Vendor Advisory 26415 Source: SECUNIA Type: Vendor Advisory 26467 Source: SECUNIA Type: Vendor Advisory 26663 Source: SECUNIA Type: Vendor Advisory 26766 Source: SECUNIA Type: Vendor Advisory 26856 Source: SECUNIA Type: Vendor Advisory 30168 Source: SECUNIA Type: Vendor Advisory 31168 Source: SECUNIA Type: Vendor Advisory 42813 Source: GENTOO Type: UNKNOWN GLSA-200708-05 Source: GENTOO Type: UNKNOWN GLSA-200711-34 Source: GENTOO Type: UNKNOWN GLSA-200805-13 Source: DEBIAN Type: UNKNOWN DSA-1613 Source: DEBIAN Type: DSA-1613 libgd2 -- multiple vulnerabilities Source: CCN Type: GLSA-200708-05 GD: Multiple vulnerabilities Source: CCN Type: GLSA-200711-34 CSTeX: Multiple vulnerabilities Source: CCN Type: GLSA-200805-13 PTeX: Multiple vulnerabilities Source: CCN Type: GD Graphics Library Web site ReleaseNote020035 Source: MISC Type: Patch http://www.libgd.org/ReleaseNote020035 Source: MANDRIVA Type: UNKNOWN MDKSA-2007:153 Source: MANDRIVA Type: UNKNOWN MDKSA-2007:164 Source: SUSE Type: UNKNOWN SUSE-SR:2007:015 Source: CCN Type: OSVDB ID: 42062 GD Graphics Library (libgd) Multiple Function Large Angle Degree Value DoS Source: FEDORA Type: UNKNOWN FEDORA-2007-692 Source: BUGTRAQ Type: UNKNOWN 20070907 FLEA-2007-0052-1 gd Source: BID Type: UNKNOWN 24651 Source: CCN Type: BID-24651 GD Graphics Library Multiple Vulnerabilities Source: TRUSTIX Type: UNKNOWN 2007-0024 Source: CCN Type: USN-854-1 GD library vulnerabilities Source: VUPEN Type: Vendor Advisory ADV-2011-0022 Source: CONFIRM Type: UNKNOWN https://bugzilla.redhat.com/show_bug.cgi?id=277421 Source: XF Type: UNKNOWN gd-imagearc-dos(35416) Source: CONFIRM Type: UNKNOWN https://issues.rpath.com/browse/RPL-1643 Source: SUSE Type: SUSE-SR:2007:015 SUSE Security Summary Report | ||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||
| |||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||