Skip to content
OpenAdvisories
Unscored DSA-1936-1 2 CVEs

libgd2 - several vulnerabilities

Published Nov 17, 2009 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 libgd2 2.0.33-5.2etch2
Debian · 5.0 libgd2 2.0.36~rc1~dfsg-3+lenny1

Vulnerabilities 2

  • Unscored —
    CVE-2007-0455 EPSS 12%

    Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote att…

  • Unscored —
    CVE-2009-3546 EPSS 10%

    The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not pr…