Home > Vulnerability Database > CVE-2007-1001

Mend.io Vulnerability Database

CVE-2007-1001

Date: April 5, 2007

Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.

Severity Score

5.6

Related Resources (38)

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2007:090

Url: http://docs.info.apple.com/article.html?artnum=306172

Url: http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.470053

Url: http://www.securityfocus.com/archive/1/466166/100/0/threaded

Url: https://issues.rpath.com/browse/RPL-1268

Url: http://www.novell.com/linux/security/advisories/2007_32_php.html

Url: http://secunia.com/advisories/24909

Url: http://secunia.com/advisories/24965

Url: http://secunia.com/advisories/24945

Url: http://secunia.com/advisories/24924

Url: http://secunia.com/advisories/25056

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/33453

Url: http://ifsec.blogspot.com/2007/04/php-521-wbmp-file-handling-integer.html

Url: http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/wbmp.c?revision=1.2.4.1.8.1&view=markup

Url: http://www.securityfocus.com/bid/23357

Url: http://secunia.com/advisories/25151

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10179

Url: http://www.redhat.com/support/errata/RHSA-2007-0153.html

Url: http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/wbmp.c?r1=1.2.4.1&r2=1.2.4.1.8.1

Url: http://rhn.redhat.com/errata/RHSA-2007-0155.html

Url: http://www.securityfocus.com/bid/25159

Url: https://access.redhat.com/security/cve/CVE-2007-1001

Url: http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html

Url: http://www.redhat.com/support/errata/RHSA-2007-0162.html

Url: http://us2.php.net/releases/4_4_7.php

Url: https://nvd.nist.gov/vuln/detail/CVE-2007-1001

Url: http://www.vupen.com/english/advisories/2007/2732

Url: http://www.vupen.com/english/advisories/2007/1269

Url: http://www.securityfocus.com/archive/1/464957/100/0/threaded

Url: http://us2.php.net/releases/5_2_2.php

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2007:088

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2007:089

Url: http://secunia.com/advisories/24814

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2007:087

Url: http://security.gentoo.org/glsa/glsa-200705-19.xml

Url: http://secunia.com/advisories/25445

Url: http://secunia.com/advisories/26235

Url: https://www.mend.io/vulnerability-database/CVE-2007-1001

Severity Score

5.6

Weakness Type (CWE)

Numeric Errors

CWE-189

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	6.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2007-1001

Date: April 5, 2007

Severity Score

Related Resources (38)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?