CVE-2007-2756: Medium severity Libgd Libgd vulnerability
The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2756?
CVE-2007-2756 is classified as a denial of service vulnerability due to the possibility of causing high CPU consumption.
How do I fix CVE-2007-2756?
To fix CVE-2007-2756, upgrade to a version of libgd later than 2.0.34 that addresses this vulnerability.
What software is affected by CVE-2007-2756?
CVE-2007-2756 specifically affects libgd version 2.0.34.
Can CVE-2007-2756 be exploited remotely?
CVE-2007-2756 requires user assistance to exploit, typically through the opening or use of a crafted PNG image.
What are the implications of CVE-2007-2756 for web applications?
Web applications using vulnerable versions of libgd may experience performance issues due to potential infinite loops from processed images.