« List of all CVEs

CVE-2007-2756

Published: 5/18/2007 Last updated: 8/7/2024 Reserved: 5/18/2007

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (1)

conf-gd

Products affected (1)

Product Vendor Version
n/a n/a < publication

References (126)