CVE:CVE-2007-0455
CNNVD:CNNVD-200701-510
GD Graphics Library 2.0.33版本及其早期版本的gdft.c中的gdImageStringFTEx函数存在缓冲区溢出。远程攻击者可以借助一个特制的具有一个JIS编码字体的字符串，造成拒绝服务(应用程序崩溃)并可能执行任意代码。
solution:Upgrade gd_graphics_library_project gd_graphics_library to a higher version than 2.0.33,and avoid the version (,2.0.33]; Upgrade php php to a higher version than 4.4.7,and avoid the version [4.4.0,4.4.7); Upgrade canonical ubuntu_linux to a higher version than 6.06,6.10,7.04,and avoid the version 6.06,6.10,7.04; Upgrade fedoraproject fedora to a higher version than 13,14,and avoid the version 13,14; Upgrade redhat enterprise_linux_desktop to a higher version than 3.0,4.0,and avoid the version 3.0,4.0; Upgrade redhat enterprise_linux_server to a higher version than 3.0,4.0,and avoid the version 3.0,4.0; Upgrade redhat enterprise_linux_workstation to a higher version than 3.0,4.0,and avoid the version 3.0,4.0
solution:Upgrade guppy guppy to a higher version than 4.5.16,and avoid the version (,4.5.16]