DEBIAN-CVE-2007-3996

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2007-3996
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-3996.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2007-3996
Upstream
Published
2007-09-04T18:17:00Z
Modified
2025-09-30T05:03:55.106175Z
Summary
[none]
Details

Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.

References

Affected packages

Debian:11

libgd2

Package

Name
libgd2
Purl
pkg:deb/debian/libgd2?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0.35.dfsg-1

Ecosystem specific 

{
    "urgency": "medium"
}

libwmf

Package

Name
libwmf
Purl
pkg:deb/debian/libwmf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.2.8.4-17
0.2.12-1
0.2.12-2
0.2.12-3
0.2.12-4
0.2.12-5
0.2.12-5.1
0.2.12-5.2
0.2.13-1
0.2.13-1.1
0.2.13-2

Ecosystem specific 

{
    "urgency": "unimportant"
}

racket

Package

Name
racket
Purl
pkg:deb/debian/racket?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.0.2-1

Ecosystem specific 

{
    "urgency": "unimportant"
}

Debian:12

libgd2

Package

Name
libgd2
Purl
pkg:deb/debian/libgd2?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0.35.dfsg-1

Ecosystem specific 

{
    "urgency": "medium"
}

libwmf

Package

Name
libwmf
Purl
pkg:deb/debian/libwmf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.2.12-5.1
0.2.12-5.2
0.2.13-1
0.2.13-1.1
0.2.13-2

Ecosystem specific 

{
    "urgency": "unimportant"
}

racket

Package

Name
racket
Purl
pkg:deb/debian/racket?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.0.2-1

Ecosystem specific 

{
    "urgency": "unimportant"
}

Debian:13

libgd2

Package

Name
libgd2
Purl
pkg:deb/debian/libgd2?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0.35.dfsg-1

Ecosystem specific 

{
    "urgency": "medium"
}

libwmf

Package

Name
libwmf
Purl
pkg:deb/debian/libwmf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.2.13-1.1
0.2.13-2

Ecosystem specific 

{
    "urgency": "unimportant"
}

racket

Package

Name
racket
Purl
pkg:deb/debian/racket?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.0.2-1

Ecosystem specific 

{
    "urgency": "unimportant"
}

Debian:14

libgd2

Package

Name
libgd2
Purl
pkg:deb/debian/libgd2?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0.35.dfsg-1

Ecosystem specific 

{
    "urgency": "medium"
}

libwmf

Package

Name
libwmf
Purl
pkg:deb/debian/libwmf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.2.13-1.1
0.2.13-2

Ecosystem specific 

{
    "urgency": "unimportant"
}

racket

Package

Name
racket
Purl
pkg:deb/debian/racket?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.0.2-1

Ecosystem specific 

{
    "urgency": "unimportant"
}