CVE-2007-3996
EPSS 15.1%Published: 9/4/2007Modified: 4/28/2026
Description
Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.
Affected packages (3)
- Debian/libgd2from 0, < 2.0.35.dfsg-1
- Debian/libwmffrom 0
- Debian/racketfrom 0, < 5.0.2-1