Description

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.

Remediation

References

CVE-2007-0455

Related Vulnerabilities

MediaWiki Improper Input Validation Vulnerability (CVE-2017-8814)

WebERP Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2018-20420)

Magento 2.0-2.3 End of life

MongoDb Reachable Assertion Vulnerability (CVE-2022-24272)

MySQL CVE-2020-2579 Vulnerability (CVE-2020-2579)

Severity

High

Classification

CVE-2007-0455 CWE-120

Tags

Missing Update Known Vulnerabilities