CVE-2007-3475: gd_graphics_library gdlib

EPSS trend

Probability

2.45%

Chance of exploitation in the next 30 days

Percentile

84%

Versus all other CVEs

30-day change

No change 0.00 pp

From 2.45% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

References

32 links

www.trustix.org/errata/2007/0024/Vendor AdvisoryX Refsource TRUSTIX
www.mandriva.com/security/advisories?name=MDKSA-2007:164Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/29157Third Party AdvisoryX Refsource SECUNIA
www.libgd.org/ReleaseNote020035X Refsource MISCPatch
secunia.com/advisories/26415Third Party AdvisoryX Refsource SECUNIA
issues.rpath.com/browse/RPL-1643X Refsource CONFIRM
bugzilla.redhat.com/show_bug.cgi?id=277421X Refsource CONFIRM
security.gentoo.org/glsa/glsa-200805-13.xmlVendor AdvisoryX Refsource GENTOO
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9728VDB EntrySignatureX Refsource OVAL
bugs.libgd.org?do=details&task_id=70X Refsource CONFIRM

Show all 32 references

www.securityfocus.com/archive/1/478796/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/26467Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/42813Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200708-05.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/30168Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.htmlVendor AdvisoryX Refsource FEDORA
www.vupen.com/english/advisories/2011/0022VDB EntryX Refsource VUPEN
secunia.com/advisories/25860Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26663Third Party AdvisoryX Refsource SECUNIA
lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/26856Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26272Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200711-34.xmlVendor AdvisoryX Refsource GENTOO
www.redhat.com/support/errata/RHSA-2008-0146.htmlVendor AdvisoryX Refsource REDHAT
lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.htmlVendor AdvisoryX Refsource FEDORA
www.securityfocus.com/bid/24651VDB EntryX Refsource BID
www.mandriva.com/security/advisories?name=MDKSA-2007:153Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/26766Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26390Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2007_15_sr.htmlVendor AdvisoryX Refsource SUSE
fedoranews.org/updates/FEDORA-2007-205.shtmlVendor AdvisoryX Refsource FEDORA
security-tracker.debian.org/tracker/CVE-2007-3475Advisory

Related vulnerabilities

RoutineCVE-2007-3478gd_graphics_library · gdlib +1 more19y agogd_graphics_library gdlibRace condition in gdImageStringFTEx (gdft_draw_bitmap) in gdft.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors, possibly involving truetype font (TTF) support.CVSS4.3MediumEPSS1.72%RoutineCVE-2007-3476gd_graphics_library · gdlib +3 more19y agogd_graphics_library gdlibArray index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault.CVSS4.3MediumEPSS2.46%RoutineCVE-2004-0941gd_graphics_library · gdlib +6 more21y agogd_graphics_library gdlibMultiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.CVSS10.0CriticalEPSS10.69%PrioritiseCVE-2004-0990gd_graphics_library · gdlib +5 more22y agogd_graphics_library gdlibInteger overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.CVSS10.0CriticalEPSS28.26%

All vulnerabilities ingdlib

CVE-2007-3475: gd_graphics_library gdlib

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References