← Vulnerability feed

Vulnerability record · CVE-2007-3474 · published 28 June 2007

CVE-2007-3474: Libgd gd graphics library vulnerability

Libgd · Gd Graphics Library

Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2.0.35 have unspecified impact and user-assisted remote attack vectors.

2.6 CVSS 2.0 Low EPSS 2.5% · top 15.7%
2.6CVSS 2.0 base score
2.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
62References
16 Jun 2026Last modified by NVD

Description

Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2.0.35 have unspecified impact and user-assisted remote attack vectors.

AV:N/AC:H/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz
http://fedoranews.org/updates/FEDORA-2007-205.shtml
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html
http://osvdb.org/37743
http://secunia.com/advisories/25855 Vendor Advisory
http://secunia.com/advisories/25860 Vendor Advisory
http://secunia.com/advisories/26272 Vendor Advisory
http://secunia.com/advisories/26390 Vendor Advisory
http://secunia.com/advisories/26415 Vendor Advisory
http://secunia.com/advisories/26467 Vendor Advisory
http://secunia.com/advisories/26663 Vendor Advisory
http://secunia.com/advisories/26766 Vendor Advisory
http://secunia.com/advisories/26856 Vendor Advisory
http://secunia.com/advisories/30168 Vendor Advisory
http://secunia.com/advisories/42813 Vendor Advisory
http://security.gentoo.org/glsa/glsa-200708-05.xml
http://security.gentoo.org/glsa/glsa-200711-34.xml
http://security.gentoo.org/glsa/glsa-200805-13.xml
http://www.libgd.org/ReleaseNote020035 Patch
http://www.mandriva.com/security/advisories?name=MDKSA-2007:153
http://www.mandriva.com/security/advisories?name=MDKSA-2007:164
http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.html
http://www.securityfocus.com/archive/1/478796/100/0/threaded
http://www.securityfocus.com/bid/24651
http://www.trustix.org/errata/2007/0024/
http://www.vupen.com/english/advisories/2007/2336 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0022 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=277421
https://exchange.xforce.ibmcloud.com/vulnerabilities/35110
https://issues.rpath.com/browse/RPL-1643
ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz
http://fedoranews.org/updates/FEDORA-2007-205.shtml
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html
http://osvdb.org/37743
http://secunia.com/advisories/25855 Vendor Advisory
http://secunia.com/advisories/25860 Vendor Advisory
http://secunia.com/advisories/26272 Vendor Advisory
http://secunia.com/advisories/26390 Vendor Advisory

Track CVE-2007-3474 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2009-3546Libgd gd graphics library memory buffer overflow vulnerabilityThe _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colors…EPSS 10%5.0CVE-2007-3477Libgd gd graphics library vulnerabilityThe (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU cons…EPSS 4.9%4.3CVE-2007-3472Libgd gd graphics library vulnerabilityInteger overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to have un…EPSS 7.3%4.3CVE-2007-3473Libgd gd graphics library vulnerabilityThe gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (cr…EPSS 13%

Source: NIST National Vulnerability Database (record CVE-2007-3474), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.