Description

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.

Remediation

References

CVE-2007-0455

Related Vulnerabilities

Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-4203)

WordPress Plugin Google Analytics Counter Tracker PHP Object Injection (3.4.0)

WordPress Plugin Captcha by BestWebSoft SQL Injection (4.1.4)

Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-26266)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-25703)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-120 CVE-2007-0455