Уязвимость CVE-2007-0455: Информация

Описание

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.

Важность: HIGH (7,5)

Ссылки на рекомендации, решения и инструменты

1. Подверженные конфигурации:

   1. Конфигурация 1

      cpe:2.3:a:gd_graphics_library_project:gd_graphics_library:*:*:*:*:*:*:*:*

      End including

      2.0.33

      ---

      Конфигурация 2

      cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

      Start including

      4.4.0

      End excliding

      4.4.7

      ---

      Конфигурация 3

      cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*

      ---

      Конфигурация 4

      cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:fedoraproject:fedora:14:*:*:*:*:*:*:*

      ---

      Конфигурация 5

      cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:redhat:enterprise_linux_server:3.0:*:*:*:*:*:*:*

      ---