blogsafe.org My Downloads

BlogSafe.org

PHP CVEs

Vulnerabilities in the PHP language itself, and which PHP versions they affect.

← Back to CVE list

CVE-2007-0455

HIGH 7.5 CVSS 2.0
Published
January 30, 2007
Last modified
June 16, 2026
NVD status
Modified
Reported by
secalert@redhat.com
Weakness
CWE-120
CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.

Affected products and versions

  • PHP — From 4.4.0 (including) to 4.4.7 (excluding)

References

  • bugzilla.redhat.com http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=224607 Issue Tracking, Third Party Advisory
  • fedoranews.org http://fedoranews.org/cms/node/2631 Broken Link
  • lists.fedoraproject.org http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html Mailing List, Third Party Advisory
  • lists.fedoraproject.org http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html Mailing List, Third Party Advisory
  • lists.rpath.com http://lists.rpath.com/pipermail/security-announce/2007-February/000145.html Broken Link
  • rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2007-0155.html Third Party Advisory
  • secunia.com http://secunia.com/advisories/23916 Not Applicable, Vendor Advisory
  • secunia.com http://secunia.com/advisories/24022 Not Applicable
  • secunia.com http://secunia.com/advisories/24052 Not Applicable
  • secunia.com http://secunia.com/advisories/24053 Not Applicable
  • secunia.com http://secunia.com/advisories/24107 Not Applicable
  • secunia.com http://secunia.com/advisories/24143 Not Applicable
  • secunia.com http://secunia.com/advisories/24151 Not Applicable
  • secunia.com http://secunia.com/advisories/24924 Not Applicable
  • secunia.com http://secunia.com/advisories/24945 Not Applicable
  • secunia.com http://secunia.com/advisories/24965 Not Applicable
  • secunia.com http://secunia.com/advisories/25575 Not Applicable
  • secunia.com http://secunia.com/advisories/29157 Not Applicable
  • secunia.com http://secunia.com/advisories/42813 Not Applicable
  • www.mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2007:035 Broken Link
  • www.mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2007:036 Broken Link
  • www.mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2007:038 Broken Link
  • www.mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2007:109 Broken Link
  • www.redhat.com http://www.redhat.com/support/errata/RHSA-2007-0153.html Third Party Advisory
  • www.redhat.com http://www.redhat.com/support/errata/RHSA-2007-0162.html Third Party Advisory
  • www.redhat.com http://www.redhat.com/support/errata/RHSA-2008-0146.html Third Party Advisory
  • www.securityfocus.com http://www.securityfocus.com/archive/1/466166/100/0/threaded Third Party Advisory, VDB Entry
  • www.securityfocus.com http://www.securityfocus.com/bid/22289 Third Party Advisory, VDB Entry
  • www.trustix.org http://www.trustix.org/errata/2007/0007 Broken Link
  • www.ubuntu.com http://www.ubuntu.com/usn/usn-473-1 Third Party Advisory
  • www.vupen.com http://www.vupen.com/english/advisories/2007/0400 Permissions Required
  • www.vupen.com http://www.vupen.com/english/advisories/2011/0022 Permissions Required
  • issues.rpath.com https://issues.rpath.com/browse/RPL-1030 Broken Link
  • issues.rpath.com https://issues.rpath.com/browse/RPL-1268 Broken Link
  • oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11303 Third Party Advisory
  • nvd.nist.gov Official NVD record