CVE-2007-3996: php Numeric Errors

Modified

AliasesDEBIAN-CVE-2007-3996

Published 04-09-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-3996 is a medium (CVSS 6.8) Numeric Errors vulnerability in php. EPSS estimates a 4.22% chance of exploitation in the next 30 days, higher than 91% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 6.8, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

6.8/10

010

Medium · v2.0 (NVD)

EPSS score

4.22%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6

DSA-1613-1 RHSA-2007:0888 RHSA-2007:0889 RHSA-2007:0890 RHSA-2007:0891 RHSA-2007:0917

Timeline

04-09-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.

CVSS metrics

1 score · 1 source · 1 version

v2.06.8

EPSS trend

Probability

4.22%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

No change 0.00 pp

From 4.22% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-189Numeric ErrorsWeaknesses in this category are related to improper calculation or conversion of numbers.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Debian3 products

libgd2< 2.0.35.dfsg-1
libwmfAll versions (No fix recorded)
racket< 5.0.2-1

Php1 product

php≤ 5.2.3

2 vendors · 4 products

References

41 links

secunia.com/advisories/26822Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200712-13.xmlVendor AdvisoryX Refsource GENTOO
www.debian.org/security/2008/dsa-1613Vendor AdvisoryX Refsource DEBIAN
www.redhat.com/support/errata/RHSA-2007-0888.htmlVendor AdvisoryX Refsource REDHAT
exchange.xforce.ibmcloud.com/vulnerabilities/36382VDB EntryX Refsource XF
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11147VDB EntrySignatureX Refsource OVAL
lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/28658Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.htmlVendor AdvisoryX Refsource FEDORA
bugs.gentoo.org/show_bug.cgi?id=201546X Refsource CONFIRM

Show all 41 references

secunia.com/advisories/26967Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27351Third Party AdvisoryX Refsource SECUNIA
www.gentoo.org/security/en/glsa/glsa-200710-02.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/31168Third Party AdvisoryX Refsource SECUNIA
www.php.net/ChangeLog-5.phpX Refsource CONFIRMPatch
secunia.com/advisories/26930Third Party AdvisoryX Refsource SECUNIA
www.trustix.org/errata/2007/0026/Vendor AdvisoryX Refsource TRUSTIX
rhn.redhat.com/errata/RHSA-2007-0889.htmlVendor AdvisoryX Refsource REDHAT
secweb.se/en/advisories/php-imagecopyresized-integer-overflow/X Refsource MISCPatch
issues.rpath.com/browse/RPL-1693X Refsource CONFIRM
secweb.se/en/advisories/php-imagecreatetruecolor-integer-overflow/X Refsource MISC
issues.rpath.com/browse/RPL-1702X Refsource CONFIRM
secunia.com/advisories/27545Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2007-449.htmX Refsource CONFIRM
www.ubuntu.com/usn/usn-557-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/26838Third Party AdvisoryX Refsource SECUNIA
securityreason.com/securityalert/3103Third Party AdvisoryX Refsource SREASON
secunia.com/advisories/27377Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/28009Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2007:187Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/27102Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2007/3023VDB EntryX Refsource VUPEN
www.php.net/releases/5_2_4.phpX Refsource CONFIRM
secunia.com/advisories/28147Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26895Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2007-0890.htmlVendor AdvisoryX Refsource REDHAT
www.redhat.com/support/errata/RHSA-2007-0891.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/26871Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/36383VDB EntryX Refsource XF
secunia.com/advisories/26642Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
security-tracker.debian.org/tracker/CVE-2007-3996Advisory