PatchTheCVEgd graphics library vulnerabilities and fixes
Recent CVEs affecting gd graphics library, with upgrade or downgrade steps. 6 tracked.
Also searched as: gdgraphicslibrary.
gd graphics library has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2009-10-19. Highest priority: CVE-2009-3546 (score 56/100).
- CVE-2009-3546 HIGH 9.3 DOWNGRADE DOWNGRADE The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, do
- CVE-2007-3477 MEDIUM 5.0 UPGRADE The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers
- CVE-2007-3474 LOW 2.6 UPGRADE Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2.0.35 have u
- CVE-2007-3473 MEDIUM 4.3 UPGRADE The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote att
- CVE-2007-3472 MEDIUM 4.3 UPGRADE Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows us
- CVE-2007-0455 HIGH 7.5 UPGRADE UPGRADE Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows r
FAQ
How do I fix gd graphics library vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gd graphics library being exploited right now?
None of the tracked gd graphics library CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gd graphics library CVE should I patch first?
CVE-2009-3546 currently ranks highest (56/100): The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, do.