CVE-2007-0455

Name: CVE-2007-0455
Creator: NVD / NIST
Published: 2007-01-30T17:28:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 11.69%

Last modified Jun 16, 2026

CVE-2007-0455 is a vulnerability of currently unknown severity. Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.. EPSS estimates a 11.69% chance of exploitation in the next 30 days.

Description

Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font.

Metrics

EPSS Probability

11.69%

95.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-120

Affected Software

Vendor	Product	Versions
Gd Graphics Library Project	Gd Graphics Library	<= 2.0.33
Php	Php	>= 4.4.0, < 4.4.7
Canonical	Ubuntu Linux	6.06
Canonical	Ubuntu Linux	6.10
Canonical	Ubuntu Linux	7.04
Fedoraproject	Fedora	13
Fedoraproject	Fedora	14
Redhat	Enterprise Linux Desktop	3.0
Redhat	Enterprise Linux Desktop	4.0
Redhat	Enterprise Linux Server	3.0
Redhat	Enterprise Linux Server	4.0
Redhat	Enterprise Linux Workstation	3.0
Redhat	Enterprise Linux Workstation	4.0

References

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=224607Issue Tracking, Third Party Advisory
http://fedoranews.org/cms/node/2631Broken Link
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.htmlMailing List, Third Party Advisory
http://lists.rpath.com/pipermail/security-announce/2007-February/000145.htmlBroken Link
http://rhn.redhat.com/errata/RHSA-2007-0155.htmlThird Party Advisory
http://secunia.com/advisories/23916Not Applicable, Vendor Advisory
http://secunia.com/advisories/24022Not Applicable
http://secunia.com/advisories/24052Not Applicable
http://secunia.com/advisories/24053Not Applicable
http://secunia.com/advisories/24107Not Applicable
http://secunia.com/advisories/24143Not Applicable
http://secunia.com/advisories/24151Not Applicable
http://secunia.com/advisories/24924Not Applicable
http://secunia.com/advisories/24945Not Applicable
http://secunia.com/advisories/24965Not Applicable
http://secunia.com/advisories/25575Not Applicable
http://secunia.com/advisories/29157Not Applicable
http://secunia.com/advisories/42813Not Applicable
http://www.mandriva.com/security/advisories?name=MDKSA-2007:035Broken Link
http://www.mandriva.com/security/advisories?name=MDKSA-2007:036Broken Link
http://www.mandriva.com/security/advisories?name=MDKSA-2007:038Broken Link
http://www.mandriva.com/security/advisories?name=MDKSA-2007:109Broken Link
http://www.redhat.com/support/errata/RHSA-2007-0153.htmlThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0162.htmlThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0146.htmlThird Party Advisory
http://www.securityfocus.com/archive/1/466166/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/22289Third Party Advisory, VDB Entry
http://www.trustix.org/errata/2007/0007Broken Link
http://www.ubuntu.com/usn/usn-473-1Third Party Advisory
http://www.vupen.com/english/advisories/2007/0400Permissions Required
http://www.vupen.com/english/advisories/2011/0022Permissions Required
https://issues.rpath.com/browse/RPL-1030Broken Link
https://issues.rpath.com/browse/RPL-1268Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11303Third Party Advisory
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=224607Issue Tracking, Third Party Advisory
http://fedoranews.org/cms/node/2631Broken Link
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.htmlMailing List, Third Party Advisory
http://lists.rpath.com/pipermail/security-announce/2007-February/000145.htmlBroken Link
http://rhn.redhat.com/errata/RHSA-2007-0155.htmlThird Party Advisory
http://secunia.com/advisories/23916Not Applicable, Vendor Advisory
http://secunia.com/advisories/24022Not Applicable
http://secunia.com/advisories/24052Not Applicable
http://secunia.com/advisories/24053Not Applicable
http://secunia.com/advisories/24107Not Applicable
http://secunia.com/advisories/24143Not Applicable
http://secunia.com/advisories/24151Not Applicable
http://secunia.com/advisories/24924Not Applicable
http://secunia.com/advisories/24945Not Applicable
http://secunia.com/advisories/24965Not Applicable
http://secunia.com/advisories/25575Not Applicable
http://secunia.com/advisories/29157Not Applicable
http://secunia.com/advisories/42813Not Applicable
http://www.mandriva.com/security/advisories?name=MDKSA-2007:035Broken Link
http://www.mandriva.com/security/advisories?name=MDKSA-2007:036Broken Link
http://www.mandriva.com/security/advisories?name=MDKSA-2007:038Broken Link
http://www.mandriva.com/security/advisories?name=MDKSA-2007:109Broken Link
http://www.redhat.com/support/errata/RHSA-2007-0153.htmlThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0162.htmlThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0146.htmlThird Party Advisory
http://www.securityfocus.com/archive/1/466166/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/22289Third Party Advisory, VDB Entry
http://www.trustix.org/errata/2007/0007Broken Link
http://www.ubuntu.com/usn/usn-473-1Third Party Advisory
http://www.vupen.com/english/advisories/2007/0400Permissions Required
http://www.vupen.com/english/advisories/2011/0022Permissions Required
https://issues.rpath.com/browse/RPL-1030Broken Link
https://issues.rpath.com/browse/RPL-1268Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11303Third Party Advisory

Timeline

Published: Jan 30, 2007
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2007-0455?

How severe is CVE-2007-0455?

Severity scoring for CVE-2007-0455 is pending analysis. The EPSS model estimates a 11.69% probability of exploitation in the next 30 days.

How do I fix CVE-2007-0455?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2007-0455?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST