OSVDB ID: 37740

Title: GD Graphics Library (libgd) gdft.c gdImageStringFTEx (gdft_draw_bitmap) Race Condition DoS

Info

Disclosure

Feb 21, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Unknown or Incomplete

Classification

Attack Type: Denial of Service
Impact: Loss of Availability
Disclosure: Vendor Verified

Solution

Upgrade to version 2.0.35 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

CVE ID: 2007-3478 (see also: NVD)
Secunia Advisory ID: 22588 25855 25860 26272 26390 26415 26415 26467 26663 26766 26856 27759 30168 42813
Bugtraq ID: 24651
SCIP VulDB ID: 3154
Related OSVDB ID: 37741 37742 37743 37744 37745
VUPEN Advisory: ADV-2007-2336
Vendor Specific News/Changelog Entry: ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz http://bugs.libgd.org/?do=details&task_id=48
http://bugs.libgd.org/?do=details&task_id=74
http://bugs.libgd.org/?do=details&task_id=92
http://bugs.php.net/bug.php?id=40578
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html
http://www.libgd.org/ReleaseNote020035
Other Advisory URL: http://fedoranews.org/updates/FEDORA-2007-205.shtml
http://frontal2.mandriva.com/security/advisories?name=MDKSA-2007:153
http://frontal2.mandriva.com/security/advisories?name=MDKSA-2007:164
http://lists.opensuse.org/opensuse-security-announce/2007-08/msg00003.html
http://lists.rpath.com/pipermail/security-announce/2007-September/000233.html
http://security.gentoo.org/glsa/glsa-200708-05.xml
http://www.gentoo.org/security/en/glsa/glsa-200708-05.xml
http://www.gentoo.org/security/en/glsa/glsa-200711-34.xml
http://www.gentoo.org/security/en/glsa/glsa-200805-13.xml
http://www.libgd.org/ReleaseNote020035
http://www.mandriva.com/security/advisories?name=MDKSA-2007:153
http://www.mandriva.com/security/advisories?name=MDKSA-2007:164
http://www.novell.com/linux/security/advisories/2007_15_sr.html
http://www.trustix.org/errata/2007/0024/
https://issues.rpath.com/browse/RPL-1643
https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00117.html
https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.html
Vendor Specific Solution URL: http://security.gentoo.org/glsa/glsa-200708-05.xml

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/37740