CVE-2007-3477
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35...
CVE-2007-3477 is a medium vulnerability (CVSS 5.0) in Libgd Gd Graphics Library, published June 28, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.86%, the 92nd percentile. Fixed in libgd2 2.0.35.dfsg-1.
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.
Exploit likelihood
What each source reports
NVD Score used
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.
- Record
CVE-2007-3477- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.
- Record
CVE-2007-3477- Updated
- 2026-11-02
EUVDEUVD-2007-3462 No score
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.
- Record
EUVD-2007-3462- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rw88-xg62-qv59 No score
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35...
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.
- Record
GHSA-rw88-xg62-qv59- Updated
- 2026-11-02
OSV No score
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.
- Record
CVE-2007-3477- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-3477 No score
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.
- Record
DEBIAN-CVE-2007-3477- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2007-3477 No score
CVE-2007-3477 in libwmf - Patched by Root
Root has patched CVE-2007-3477 in the libwmf package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2007-3477- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libgd2Debian:12 |
before 2.0.35.dfsg-1 | 2.0.35.dfsg-1 |
libgd2Debian:13 |
before 2.0.35.dfsg-1 | 2.0.35.dfsg-1 |
libgd2Debian:14 |
before 2.0.35.dfsg-1 | 2.0.35.dfsg-1 |
libwmfDebian:12 |
All versions, plus listed versions 0.2.12-5.10.2.12-5.20.2.13-10.2.13-1.10.2.13-20.2.14-1 |
None known |
libwmfDebian:13 |
All versions, plus listed versions 0.2.13-1.10.2.13-20.2.14-1 |
None known |
libwmfDebian:14 |
All versions, plus listed versions 0.2.13-1.10.2.13-20.2.14-1 |
None known |
racketDebian:12 |
before 5.0.2-1 | 5.0.2-1 |
racketDebian:13 |
before 5.0.2-1 | 5.0.2-1 |
racketDebian:14 |
before 5.0.2-1 | 5.0.2-1 |
libgd2Debian:4.0 |
before 2.0.33-5.2etch1, plus listed versions 2.0.33-5.2 |
2.0.33-5.2etch1 |
libwmfRoot:Debian:12 |
before 0.2.12-5.1.root.io.4 | 0.2.12-5.1.root.io.40.2.12-5.1.root.io.50.2.12-5.1.root.io.30.2.12-5.1.root.io.60.2.12-5.1.aikido.7 |
rootio-libwmfRoot:Debian:12 |
before 0.2.12-5.1.root.io.4 | 0.2.12-5.1.root.io.40.2.12-5.1.root.io.50.2.12-5.1.root.io.30.2.12-5.1.root.io.60.2.12-5.1.aikido.7 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | affected, aliases, facts, references, title | GitHub Advisories, OSV |
| 2026-11-02 | created | CVE List, NVD |
References
trustix.org/errata/2007/0024
mandriva.com/security/advisories?name=MDKSA-2007:164
debian.org/security/2008/dsa-1613
libgd.org/ReleaseNote020035
secunia.com/advisories/26415
issues.rpath.com/browse/RPL-1643
Show 29 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=277421
security.gentoo.org/glsa/glsa-200805-13.xml
securityfocus.com/archive/1/478796/100/0/threaded
bugs.libgd.org?do=details&task_id=92
redhat.com/archives/fedora-package-announce/2007-September/msg00311.html
vupen.com/english/advisories/2011/0022
lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html
osvdb.org/42062
novell.com/linux/security/advisories/2007_15_sr.html
fedoranews.org/updates/FEDORA-2007-205.shtml
nvd.nist.gov/vuln/detail/CVE-2007-3477
github.com/advisories/GHSA-rw88-xg62-qv59
security-tracker.debian.org/tracker/CVE-2007-3477