Every CVE Search/ Get API key

CVE-2007-3473

The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user...

4.3 MediumPublic exploitFix available

The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure.

Exploit likelihood

13.3%Down 2.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure.

Record
CVE-2007-3473
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure.

Record
CVE-2007-3473
Updated
2026-11-02
EUVDEUVD-2007-3458 No score

The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure.

Record
EUVD-2007-3458
Updated
2026-11-03
GitHub AdvisoriesGHSA-6q4h-qfmx-rq72 No score

The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user...

The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure.

Record
GHSA-6q4h-qfmx-rq72
Updated
2026-11-02
OSV No score

The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure.

Record
CVE-2007-3473
Updated
2026-11-02
OSVDEBIAN-CVE-2007-3473 No score

The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure.

Record
DEBIAN-CVE-2007-3473
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libgd2
Debian:12
 before 2.0.35.dfsg-1
2.0.35.dfsg-1
libgd2
Debian:13
 before 2.0.35.dfsg-1
2.0.35.dfsg-1
libgd2
Debian:14
 before 2.0.35.dfsg-1
2.0.35.dfsg-1
gd
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:2.0.28-5.4E.el4_6.1
0:2.0.28-5.4E.el4_6.1
gd-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:2.0.28-5.4E.el4_6.1
0:2.0.28-5.4E.el4_6.1
gd-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:2.0.28-5.4E.el4_6.1
0:2.0.28-5.4E.el4_6.1
gd-progs
Red Hat:enterprise_linux:4::as
From an advisory covering 7 CVEs
 before 0:2.0.28-5.4E.el4_6.1
0:2.0.28-5.4E.el4_6.1
gd
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:2.0.28-5.4E.el4_6.1
0:2.0.28-5.4E.el4_6.1
gd-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:2.0.28-5.4E.el4_6.1
0:2.0.28-5.4E.el4_6.1
gd-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:2.0.28-5.4E.el4_6.1
0:2.0.28-5.4E.el4_6.1
Show 19 moreShow less
Affected packages
PackageAffectedFixed
gd-progs
Red Hat:enterprise_linux:4::desktop
From an advisory covering 7 CVEs
 before 0:2.0.28-5.4E.el4_6.1
0:2.0.28-5.4E.el4_6.1
gd
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:2.0.28-5.4E.el4_6.1
0:2.0.28-5.4E.el4_6.1
gd-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:2.0.28-5.4E.el4_6.1
0:2.0.28-5.4E.el4_6.1
gd-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:2.0.28-5.4E.el4_6.1
0:2.0.28-5.4E.el4_6.1
gd-progs
Red Hat:enterprise_linux:4::es
From an advisory covering 7 CVEs
 before 0:2.0.28-5.4E.el4_6.1
0:2.0.28-5.4E.el4_6.1
gd
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:2.0.28-5.4E.el4_6.1
0:2.0.28-5.4E.el4_6.1
gd-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:2.0.28-5.4E.el4_6.1
0:2.0.28-5.4E.el4_6.1
gd-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:2.0.28-5.4E.el4_6.1
0:2.0.28-5.4E.el4_6.1
gd-progs
Red Hat:enterprise_linux:4::ws
From an advisory covering 7 CVEs
 before 0:2.0.28-5.4E.el4_6.1
0:2.0.28-5.4E.el4_6.1
gd
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:2.0.33-9.4.el5_1.1
0:2.0.33-9.4.el5_1.1
gd-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:2.0.33-9.4.el5_1.1
0:2.0.33-9.4.el5_1.1
gd-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
 before 0:2.0.33-9.4.el5_1.1
0:2.0.33-9.4.el5_1.1
gd
Red Hat:enterprise_linux:5::client
From an advisory covering 7 CVEs
 before 0:2.0.33-9.4.el5_1.1
0:2.0.33-9.4.el5_1.1
gd-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 7 CVEs
 before 0:2.0.33-9.4.el5_1.1
0:2.0.33-9.4.el5_1.1
gd-progs
Red Hat:enterprise_linux:5::client
From an advisory covering 7 CVEs
 before 0:2.0.33-9.4.el5_1.1
0:2.0.33-9.4.el5_1.1
gd
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:2.0.33-9.4.el5_1.1
0:2.0.33-9.4.el5_1.1
gd-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:2.0.33-9.4.el5_1.1
0:2.0.33-9.4.el5_1.1
gd-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:2.0.33-9.4.el5_1.1
0:2.0.33-9.4.el5_1.1
gd-progs
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
 before 0:2.0.33-9.4.el5_1.1
0:2.0.33-9.4.el5_1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBGD Graphics Library 2.0.34 - 'libgd' gdImageCreateXbm Function Unspecified Denial of Service2007-06-26

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
affected, aliases, exploits, facts, references, titleExploit-DB, GitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-3473 is a medium vulnerability (CVSS 4.3) in Libgd Gd Graphics Library, published June 28, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 13.3%, the 96th percentile. Fixed in libgd2 2.0.35.dfsg-1.

References

Show 61 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open