CVE-2007-0455
Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.
- EPSS
- 12% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- CWE
- CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- fedoraproject:fedora
- gd_graphics_library_project:gd_graphics_library
- php:php
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_server
- redhat:enterprise_linux_workstation
References
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=224607
- http://fedoranews.org/cms/node/2631
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html
- http://lists.rpath.com/pipermail/security-announce/2007-February/000145.html