CVE-2007-2756
- State
- Published
- Severity
- Not scored
- Published
- May 18, 2007
- Updated
- Aug 7, 2024
- Reserved
- May 18, 2007
Description
The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 26231third-party-advisory
- 36643vdb-entry
- 1018187vdb-entry
- 29157third-party-advisory
- 25658third-party-advisory
- 27110third-party-advisory
- 25590third-party-advisory
- 26048third-party-advisory
- gd-gdpngreaddata-dos(34420)vdb-entry
- 25362third-party-advisory
- OpenPKG-SA-2007.020vendor-advisory
- 25657third-party-advisory
- FEDORA-2007-709vendor-advisory
- 25855third-party-advisory
- 26967third-party-advisory
- MDKSA-2007:122vendor-advisory
- ADV-2007-2016vdb-entry
- GLSA-200805-13vendor-advisory
- GLSA-200710-02vendor-advisory
- MDKSA-2007:123vendor-advisory
- 24089vdb-entry
- http://www.libgd.org/ReleaseNote020035
- GLSA-200708-05vendor-advisory
- 30168third-party-advisory
- MDKSA-2007:124vendor-advisory
- ADV-2007-1904vdb-entry
- 26930third-party-advisory
- 35788vdb-entry
- FEDORA-2007-2215vendor-advisory
- ADV-2007-2336vdb-entry
- RHSA-2007:0889vendor-advisory
- 2007-0023vendor-advisory
- 25353third-party-advisory
- ADV-2007-3386vdb-entry
- http://bugs.libgd.org/?do=details&task_id=86
- 2007-0019vendor-advisory
- 27037third-party-advisory
- SUSE-SR:2007:013vendor-advisory
- 25378third-party-advisory
- 27545third-party-advisory
- GLSA-200711-34vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm
- SSA:2007-152-01vendor-advisory
- 25646third-party-advisory
- RHSA-2008:0146vendor-advisory
- http://www.php.net/releases/5_2_3.php
- SSRT071447vendor-advisory
- https://issues.rpath.com/browse/RPL-1394
- 25535third-party-advisory
- MDKSA-2007:187vendor-advisory
- 27102third-party-advisory
- oval:org.mitre.oval:def:10779vdb-entrysignature
- 26895third-party-advisory
- 25787third-party-advisory
- 25575third-party-advisory
- RHSA-2007:0890vendor-advisory
- ADV-2007-1905vdb-entry
- 26390third-party-advisory
- RHSA-2007:0891vendor-advisory
- USN-473-1vendor-advisory
- 26871third-party-advisory
- SUSE-SA:2007:044vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.