GD Graphics Library "_gdGetColors" Remote Buffer Overflow

06 November 2009
Bookmark and Share
GD Graphics Library (gdlib) is an open-source graphics library available for multiple platforms, including UNIX variants and Microsoft Windows. The library is exposed to a remote buffer overflow issue because it fails to perform adequate boundary checks on user-supplied data. This issue stems from an error in the "_gdGetColors()" function of the "gd_gd.c" source file.

Ref: http://seclists.org/oss-sec/2009/q4/41

09.44.44 - CVE: CVE-2009-3546
Platform: Cross Platform