• info
• discussion
• exploit
• solution
• references

GD Graphics Library Multiple Unspecified Remote Buffer overflow Vulnerabilities

Solution:
Please see the referenced advisories for more information and fixes.


wvWare libwmf 0.2.8

• Mandriva lib64wmf0.2_7-0.2.8-6.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva lib64wmf0.2_7-devel-0.2.8-6.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libwmf-0.2.8-6.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libwmf-0.2.8-6.1.C30mdk.src.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libwmf-0.2.8-6.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libwmf0.2_7-0.2.8-6.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libwmf0.2_7-devel-0.2.8-6.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download

GD Graphics Library gdlib 1.8.4

• Debian libgd-dev_1.8.4-17.woody4_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8. 4-17.woody4_alpha.deb


• Debian libgd-dev_1.8.4-17.woody4_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8. 4-17.woody4_arm.deb


• Debian libgd-dev_1.8.4-17.woody4_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8. 4-17.woody4_hppa.deb


• Debian libgd-dev_1.8.4-17.woody4_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8. 4-17.woody4_i386.deb


• Debian libgd-dev_1.8.4-17.woody4_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8. 4-17.woody4_ia64.deb


• Debian libgd-dev_1.8.4-17.woody4_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8. 4-17.woody4_m68k.deb


• Debian libgd-dev_1.8.4-17.woody4_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8. 4-17.woody4_mips.deb


• Debian libgd-dev_1.8.4-17.woody4_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8. 4-17.woody4_mipsel.deb


• Debian libgd-dev_1.8.4-17.woody4_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8. 4-17.woody4_powerpc.deb


• Debian libgd-dev_1.8.4-17.woody4_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8. 4-17.woody4_s390.deb


• Debian libgd-dev_1.8.4-17.woody4_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8. 4-17.woody4_sparc.deb


• Debian libgd-noxpm-dev_1.8.4-17.woody4_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-de v_1.8.4-17.woody4_alpha.deb


• Debian libgd-noxpm-dev_1.8.4-17.woody4_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-de v_1.8.4-17.woody4_arm.deb


• Debian libgd-noxpm-dev_1.8.4-17.woody4_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-de v_1.8.4-17.woody4_hppa.deb


• Debian libgd-noxpm-dev_1.8.4-17.woody4_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-de v_1.8.4-17.woody4_i386.deb


• Debian libgd-noxpm-dev_1.8.4-17.woody4_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-de v_1.8.4-17.woody4_ia64.deb


• Debian libgd-noxpm-dev_1.8.4-17.woody4_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-de v_1.8.4-17.woody4_m68k.deb


• Debian libgd-noxpm-dev_1.8.4-17.woody4_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-de v_1.8.4-17.woody4_mips.deb


• Debian libgd-noxpm-dev_1.8.4-17.woody4_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-de v_1.8.4-17.woody4_mipsel.deb


• Debian libgd-noxpm-dev_1.8.4-17.woody4_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-de v_1.8.4-17.woody4_powerpc.deb


• Debian libgd-noxpm-dev_1.8.4-17.woody4_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-de v_1.8.4-17.woody4_s390.deb


• Debian libgd-noxpm-dev_1.8.4-17.woody4_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-de v_1.8.4-17.woody4_sparc.deb


• Debian libgd1-noxpm_1.8.4-17.woody4_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1 .8.4-17.woody4_arm.deb


• Debian libgd1-noxpm_1.8.4-17.woody4_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1 .8.4-17.woody4_hppa.deb


• Debian libgd1-noxpm_1.8.4-17.woody4_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1 .8.4-17.woody4_i386.deb


• Debian libgd1-noxpm_1.8.4-17.woody4_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1 .8.4-17.woody4_ia64.deb


• Debian libgd1-noxpm_1.8.4-17.woody4_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1 .8.4-17.woody4_m68k.deb


• Debian libgd1-noxpm_1.8.4-17.woody4_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1 .8.4-17.woody4_mips.deb


• Debian libgd1-noxpm_1.8.4-17.woody4_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1 .8.4-17.woody4_mipsel.deb


• Debian libgd1-noxpm_1.8.4-17.woody4_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1 .8.4-17.woody4_powerpc.deb


• Debian libgd1-noxpm_1.8.4-17.woody4_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1 .8.4-17.woody4_s390.deb


• Debian libgd1-noxpm_1.8.4-17.woody4_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1 .8.4-17.woody4_sparc.deb


• Debian libgd1_1.8.4-17.woody4_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-1 7.woody4_alpha.deb


• Debian libgd1_1.8.4-17.woody4_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-1 7.woody4_arm.deb


• Debian libgd1_1.8.4-17.woody4_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-1 7.woody4_hppa.deb


• Debian libgd1_1.8.4-17.woody4_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-1 7.woody4_i386.deb


• Debian libgd1_1.8.4-17.woody4_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-1 7.woody4_ia64.deb


• Debian libgd1_1.8.4-17.woody4_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-1 7.woody4_m68k.deb


• Debian libgd1_1.8.4-17.woody4_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-1 7.woody4_mips.deb


• Debian libgd1_1.8.4-17.woody4_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-1 7.woody4_mipsel.deb


• Debian libgd1_1.8.4-17.woody4_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-1 7.woody4_powerpc.deb


• Debian libgd1_1.8.4-17.woody4_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-1 7.woody4_s390.deb


• Debian libgd1_1.8.4-17.woody4_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-1 7.woody4_sparc.deb

GD Graphics Library gdlib 2.0.21

• Fedora gd-2.0.21-5.20.1.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora gd-2.0.21-5.20.1.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora gd-debuginfo-2.0.21-5.20.1.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora gd-debuginfo-2.0.21-5.20.1.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora gd-devel-2.0.21-5.20.1.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora gd-devel-2.0.21-5.20.1.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora gd-progs-2.0.21-5.20.1.i386.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/


• Fedora gd-progs-2.0.21-5.20.1.x86_64.rpm
  RedHat Fedora Core 2
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

GD Graphics Library gdlib 2.0.23

• Ubuntu libgd-tools_2.0.23-2ubuntu0.2_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/libg/libgd2/libgd-tool s_2.0.23-2ubuntu0.2_amd64.deb


• Ubuntu libgd-tools_2.0.23-2ubuntu0.2_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/libg/libgd2/libgd-tool s_2.0.23-2ubuntu0.2_i386.deb


• Ubuntu libgd-tools_2.0.23-2ubuntu0.2_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/libg/libgd2/libgd-tool s_2.0.23-2ubuntu0.2_powerpc.deb


• Ubuntu libgd2-dev_2.0.23-2ubuntu0.2_all.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-dev_2.0 .23-2ubuntu0.2_all.deb


• Ubuntu libgd2-noxpm-dev_2.0.23-2ubuntu0.2_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-noxpm-d ev_2.0.23-2ubuntu0.2_amd64.deb


• Ubuntu libgd2-noxpm-dev_2.0.23-2ubuntu0.2_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-noxpm-d ev_2.0.23-2ubuntu0.2_i386.deb


• Ubuntu libgd2-noxpm-dev_2.0.23-2ubuntu0.2_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-noxpm-d ev_2.0.23-2ubuntu0.2_powerpc.deb


• Ubuntu libgd2-noxpm_2.0.23-2ubuntu0.2_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-noxpm_2 .0.23-2ubuntu0.2_amd64.deb


• Ubuntu libgd2-noxpm_2.0.23-2ubuntu0.2_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-noxpm_2 .0.23-2ubuntu0.2_i386.deb


• Ubuntu libgd2-noxpm_2.0.23-2ubuntu0.2_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-noxpm_2 .0.23-2ubuntu0.2_powerpc.deb


• Ubuntu libgd2-xpm-dev_2.0.23-2ubuntu0.2_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-xpm-dev _2.0.23-2ubuntu0.2_amd64.deb


• Ubuntu libgd2-xpm-dev_2.0.23-2ubuntu0.2_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-xpm-dev _2.0.23-2ubuntu0.2_i386.deb


• Ubuntu libgd2-xpm-dev_2.0.23-2ubuntu0.2_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-xpm-dev _2.0.23-2ubuntu0.2_powerpc.deb


• Ubuntu libgd2-xpm_2.0.23-2ubuntu0.2_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-xpm_2.0 .23-2ubuntu0.2_amd64.deb


• Ubuntu libgd2-xpm_2.0.23-2ubuntu0.2_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-xpm_2.0 .23-2ubuntu0.2_i386.deb


• Ubuntu libgd2-xpm_2.0.23-2ubuntu0.2_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/libg/libgd2/libgd2-xpm_2.0 .23-2ubuntu0.2_powerpc.deb


• Ubuntu libgd2_2.0.23-2ubuntu0.2_all.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/libg/libgd2/libgd2_2.0 .23-2ubuntu0.2_all.deb

GD Graphics Library gdlib 2.0.28

• Fedora gd-2.0.28-1.30.1.i386.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora gd-2.0.28-1.30.1.x86_64.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora gd-debuginfo-2.0.28-1.30.1.i386.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora gd-debuginfo-2.0.28-1.30.1.x86_64.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora gd-devel-2.0.28-1.30.1.i386.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora gd-devel-2.0.28-1.30.1.x86_64.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora gd-progs-2.0.28-1.30.1.i386.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora gd-progs-2.0.28-1.30.1.x86_64.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

GD Graphics Library gdlib 2.0.33

• Trustix gd-2.0.33-3tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix gd-devel-2.0.33-3tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix gd-utils-2.0.33-3tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/

SGI ProPack 3.0

• SGI patch10131.tar.gz
  ftp://patches.sgi.com/support/free/security/patches/ProPack/3/patch101 31.tar.gz