← Vulnerability feed

Vulnerability record · CVE-2007-3472 · published 28 June 2007

CVE-2007-3472: Libgd gd graphics library vulnerability

Libgd · Gd Graphics Library

Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to have unspecified attack vectors and impact.

4.3 CVSS 2.0 Medium EPSS 7.3% · top 5.8% CWE-189 · CWE-189
4.3CVSS 2.0 base score
7.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
74References
16 Jun 2026Last modified by NVD

Description

Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to have unspecified attack vectors and impact.

AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz
http://bugs.libgd.org/?do=details&task_id=89
http://fedoranews.org/updates/FEDORA-2007-205.shtml
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html
http://osvdb.org/37745
http://secunia.com/advisories/25855 Vendor Advisory
http://secunia.com/advisories/25860 Vendor Advisory
http://secunia.com/advisories/26272 Vendor Advisory
http://secunia.com/advisories/26390 Vendor Advisory
http://secunia.com/advisories/26415 Vendor Advisory
http://secunia.com/advisories/26467 Vendor Advisory
http://secunia.com/advisories/26663 Vendor Advisory
http://secunia.com/advisories/26766 Vendor Advisory
http://secunia.com/advisories/26856 Vendor Advisory
http://secunia.com/advisories/29157 Vendor Advisory
http://secunia.com/advisories/30168 Vendor Advisory
http://secunia.com/advisories/42813 Vendor Advisory
http://security.gentoo.org/glsa/glsa-200708-05.xml
http://security.gentoo.org/glsa/glsa-200711-34.xml
http://security.gentoo.org/glsa/glsa-200805-13.xml
http://www.libgd.org/ReleaseNote020035
http://www.mandriva.com/security/advisories?name=MDKSA-2007:153
http://www.mandriva.com/security/advisories?name=MDKSA-2007:164
http://www.novell.com/linux/security/advisories/2007_15_sr.html
http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.html
http://www.redhat.com/support/errata/RHSA-2008-0146.html Vendor Advisory
http://www.securityfocus.com/archive/1/478796/100/0/threaded
http://www.securityfocus.com/bid/24651
http://www.secweb.se/en/advisories/gd-gdimagecreatetruecolor-integer-overflow/
http://www.trustix.org/errata/2007/0024/
http://www.vupen.com/english/advisories/2007/2336 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0022 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=277421
https://exchange.xforce.ibmcloud.com/vulnerabilities/35108
https://issues.rpath.com/browse/RPL-1643
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11067
ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz
http://bugs.libgd.org/?do=details&task_id=89
http://fedoranews.org/updates/FEDORA-2007-205.shtml

Track CVE-2007-3472 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2009-3546Libgd gd graphics library memory buffer overflow vulnerabilityThe _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colors…EPSS 10%5.0CVE-2007-3477Libgd gd graphics library vulnerabilityThe (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU cons…EPSS 4.9%4.3CVE-2007-3473Libgd gd graphics library vulnerabilityThe gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (cr…EPSS 13%2.6CVE-2007-3474Libgd gd graphics library vulnerabilityMultiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2.0.35 have unspecified impact and user-assisted rem…EPSS 2.5%8.4CVE-2013-2094Linux Kernel perf_swevent_init Integer Type Flaw Enables Local Privilege EscalationThe perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, allowing a local user to…KEVEPSS 48%analysed

Source: NIST National Vulnerability Database (record CVE-2007-3472), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.