CVE-2007-3477
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35...
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.
Exploit likelihood
What each source reports
NVD Score used
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.
- Record
CVE-2007-3477- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE ListNo score
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.
- Record
CVE-2007-3477- Updated
- 2026-11-02
EUVDEUVD-2007-3462No score
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.
- Record
EUVD-2007-3462- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rw88-xg62-qv59No score
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35...
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.
- Record
GHSA-rw88-xg62-qv59- Updated
- 2026-11-02
OSVNo score
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.
- Record
CVE-2007-3477- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-3477No score
The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.
- Record
DEBIAN-CVE-2007-3477- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2007-3477No score
CVE-2007-3477 in libwmf - Patched by Root
Root has patched CVE-2007-3477 in the libwmf package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2007-3477- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libgd2Debian:12 | before 2.0.35.dfsg-1 | 2.0.35.dfsg-1 |
libgd2Debian:13 | before 2.0.35.dfsg-1 | 2.0.35.dfsg-1 |
libgd2Debian:14 | before 2.0.35.dfsg-1 | 2.0.35.dfsg-1 |
libwmfDebian:12 | All versions, plus listed versions 0.2.12-5.10.2.12-5.20.2.13-10.2.13-1.10.2.13-20.2.14-1 | None known |
libwmfDebian:13 | All versions, plus listed versions 0.2.13-1.10.2.13-20.2.14-1 | None known |
libwmfDebian:14 | All versions, plus listed versions 0.2.13-1.10.2.13-20.2.14-1 | None known |
racketDebian:12 | before 5.0.2-1 | 5.0.2-1 |
racketDebian:13 | before 5.0.2-1 | 5.0.2-1 |
racketDebian:14 | before 5.0.2-1 | 5.0.2-1 |
libgd2Debian:4.0 From an advisory covering 5 CVEs | before 2.0.33-5.2etch1, plus listed versions 2.0.33-5.2 | 2.0.33-5.2etch1 |
libwmfRoot:Debian:12 | before 0.2.12-5.1.root.io.4 | 0.2.12-5.1.root.io.40.2.12-5.1.root.io.50.2.12-5.1.root.io.30.2.12-5.1.root.io.60.2.12-5.1.aikido.7 |
rootio-libwmfRoot:Debian:12 | before 0.2.12-5.1.root.io.4 | 0.2.12-5.1.root.io.40.2.12-5.1.root.io.50.2.12-5.1.root.io.30.2.12-5.1.root.io.60.2.12-5.1.aikido.7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3477 is a medium vulnerability (CVSS 5.0) in Libgd Gd Graphics Library, published June 28, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.86%, the 92nd percentile. Fixed in libgd2 2.0.35.dfsg-1.
References
trustix.org/errata/2007/0024
mandriva.com/security/advisories?name=MDKSA-2007:164
debian.org/security/2008/dsa-1613
libgd.org/ReleaseNote020035
secunia.com/advisories/26415
issues.rpath.com/browse/RPL-1643
Show 29 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=277421
security.gentoo.org/glsa/glsa-200805-13.xml
securityfocus.com/archive/1/478796/100/0/threaded
bugs.libgd.org?do=details&task_id=92
redhat.com/archives/fedora-package-announce/2007-September/msg00311.html
vupen.com/english/advisories/2011/0022
lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html
osvdb.org/42062
novell.com/linux/security/advisories/2007_15_sr.html
fedoranews.org/updates/FEDORA-2007-205.shtml
nvd.nist.gov/vuln/detail/CVE-2007-3477
github.com/advisories/GHSA-rw88-xg62-qv59
security-tracker.debian.org/tracker/CVE-2007-3477