CVE-2007-2756

MEDIUM 4.3CVE-2007-2756 · Published 18/05/2007 · updated 16/06/2026

In short

CVE-2007-2756 is a MEDIUM (CVSS 4.3) vulnerability affecting libgd (libgd).
Chance of exploitation in the next 30 days (EPSS): 4.3%, higher than 91.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
libgd libgd	`= 2.0.34`	No fix yet

Description

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng.

References

bugs.libgd.org · Patch
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp
lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
osvdb.org/35788
osvdb.org/36643
rhn.redhat.com/errata/RHSA-2007-0889.html
secunia.com/advisories/25353
secunia.com/advisories/25362
secunia.com/advisories/25378
secunia.com/advisories/25535
secunia.com/advisories/25575
secunia.com/advisories/25590
secunia.com/advisories/25646
secunia.com/advisories/25657
secunia.com/advisories/25658
secunia.com/advisories/25787

More vulnerabilities in libgd

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free