CVE-2007-1001
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD...
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.
Exploit likelihood
What each source reports
NVD Score used
6.8
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.
- Record
CVE-2007-1001- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.
- Record
CVE-2007-1001- Updated
- 2026-11-02
EUVDEUVD-2007-0998 No score
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.
- Record
EUVD-2007-0998- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-62rc-79c5-9jv7 No score
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD...
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.
- Record
GHSA-62rc-79c5-9jv7- Updated
- 2026-11-02
OSV No score
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.
- Record
CVE-2007-1001- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-1001 No score
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.
- Record
DEBIAN-CVE-2007-1001- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libgd2Debian:12 |
before 2.0.33-1 | 2.0.33-1 |
libgd2Debian:13 |
before 2.0.33-1 | 2.0.33-1 |
libgd2Debian:14 |
before 2.0.33-1 | 2.0.33-1 |
phpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-cliRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-commonRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-dbaRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
Show 145 moreShow less
| Package | Affected | Fixed |
|---|---|---|
php-gdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-imapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-ldapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-odbcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-pdoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-snmpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-soapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-xmlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
phpRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-bcmathRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-cliRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-commonRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-dbaRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-develRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-gdRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-imapRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-ldapRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-mbstringRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-mysqlRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-ncursesRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-odbcRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-pdoRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-pgsqlRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-snmpRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-soapRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-xmlRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
php-xmlrpcRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.1.6-11.el5 | 0:5.1.6-11.el5 |
phpRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-develRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-imapRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-ldapRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-mysqlRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-odbcRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-pgsqlRed Hat:enterprise_linux:3::as From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
phpRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-develRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-imapRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-ldapRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-mysqlRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-odbcRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-pgsqlRed Hat:enterprise_linux:3::desktop From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
phpRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-develRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-imapRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-ldapRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-mysqlRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-odbcRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-pgsqlRed Hat:enterprise_linux:3::es From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
phpRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-develRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-imapRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-ldapRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-mysqlRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-odbcRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
php-pgsqlRed Hat:enterprise_linux:3::ws From an advisory covering 7 CVEs |
before 0:4.3.2-40.ent | 0:4.3.2-40.ent |
phpRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-develRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-domxmlRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-gdRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-imapRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-ldapRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-mbstringRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-mysqlRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-ncursesRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-odbcRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-pearRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-pgsqlRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-snmpRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-xmlrpcRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
phpRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-develRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-domxmlRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-gdRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-imapRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-ldapRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-mbstringRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-mysqlRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-ncursesRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-odbcRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-pearRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-pgsqlRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-snmpRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
phpRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-develRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-domxmlRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-gdRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-imapRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-ldapRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-mbstringRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-mysqlRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-ncursesRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-odbcRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-pearRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-pgsqlRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-snmpRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-xmlrpcRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
phpRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-develRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-domxmlRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-gdRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-imapRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-ldapRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-mbstringRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-mysqlRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-ncursesRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-odbcRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-pearRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-pgsqlRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-snmpRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
php-xmlrpcRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs |
before 0:4.3.9-3.22.4 | 0:4.3.9-3.22.4 |
phpRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-bcmathRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-cliRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-commonRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-dbaRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-debuginfoRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-develRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-gdRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-imapRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-ldapRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-mbstringRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-mysqlRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-ncursesRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-odbcRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-pdoRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-pgsqlRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-snmpRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-soapRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-xmlRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
php-xmlrpcRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.1.6-3.el4s1.6 | 0:5.1.6-3.el4s1.6 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PHP 5.2.1 'GD' Extension - '.WBMP' File Integer Overflow | 2007-04-07 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1001 is a medium vulnerability (CVSS 6.8) in Php, published April 6, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 8.44%, the 95th percentile. Fixed in libgd2 2.0.33-1.
References
vupen.com/english/advisories/2007/2732
slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.470053
secunia.com/advisories/25056
secunia.com/advisories/25151
exchange.xforce.ibmcloud.com/vulnerabilities/33453
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10179
Show 72 moreShow less
securityfocus.com/archive/1/466166/100/0/threaded
lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
security.gentoo.org/glsa/glsa-200705-19.xml
redhat.com/support/errata/RHSA-2007-0162.html
us2.php.net/releases/4_4_7.php
mandriva.com/security/advisories?name=MDKSA-2007:090
securityfocus.com/archive/1/464957/100/0/threaded
cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/wbmp.c?r1=1.2.4.1&r2=1.2.4.1.8.1
secunia.com/advisories/24909
ifsec.blogspot.com/2007/04/php-521-wbmp-file-handling-integer.html
mandriva.com/security/advisories?name=MDKSA-2007:087
secunia.com/advisories/24945
issues.rpath.com/browse/RPL-1268
us2.php.net/releases/5_2_2.php
docs.info.apple.com/article.html?artnum=306172
secunia.com/advisories/24924
securityfocus.com/bid/23357
rhn.redhat.com/errata/RHSA-2007-0155.html
vupen.com/english/advisories/2007/1269
secunia.com/advisories/24965
securityfocus.com/bid/25159
cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/wbmp.c?revision=1.2.4.1.8.1&view=markup
mandriva.com/security/advisories?name=MDKSA-2007:089
secunia.com/advisories/25445
secunia.com/advisories/24814
novell.com/linux/security/advisories/2007_32_php.html
mandriva.com/security/advisories?name=MDKSA-2007:088
secunia.com/advisories/26235
redhat.com/support/errata/RHSA-2007-0153.html
nvd.nist.gov/vuln/detail/CVE-2007-1001
github.com/advisories/GHSA-62rc-79c5-9jv7
security-tracker.debian.org/tracker/CVE-2007-1001
access.redhat.com/errata/RHSA-2007:0153
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=235016
bugzilla.redhat.com/show_bug.cgi?id=235036
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0153.json
access.redhat.com/security/cve/CVE-2007-0455
bugzilla.redhat.com/show_bug.cgi?id=224607
cve.org/CVERecord?id=CVE-2007-0455
nvd.nist.gov/vuln/detail/CVE-2007-0455
access.redhat.com/security/cve/CVE-2007-1001
bugzilla.redhat.com/show_bug.cgi?id=1618291
cve.org/CVERecord?id=CVE-2007-1001
access.redhat.com/security/cve/CVE-2007-1583
bugzilla.redhat.com/show_bug.cgi?id=1618303
cve.org/CVERecord?id=CVE-2007-1583
nvd.nist.gov/vuln/detail/CVE-2007-1583
access.redhat.com/security/cve/CVE-2007-1718
bugzilla.redhat.com/show_bug.cgi?id=1618306
cve.org/CVERecord?id=CVE-2007-1718
nvd.nist.gov/vuln/detail/CVE-2007-1718
access.redhat.com/errata/RHSA-2007:0155
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=230556
bugzilla.redhat.com/show_bug.cgi?id=235028
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0155.json
access.redhat.com/security/cve/CVE-2007-1285
bugzilla.redhat.com/show_bug.cgi?id=1618296
cve.org/CVERecord?id=CVE-2007-1285
nvd.nist.gov/vuln/detail/CVE-2007-1285
access.redhat.com/security/cve/CVE-2007-1286
bugzilla.redhat.com/show_bug.cgi?id=1618297
cve.org/CVERecord?id=CVE-2007-1286
nvd.nist.gov/vuln/detail/CVE-2007-1286
access.redhat.com/security/cve/CVE-2007-1711
bugzilla.redhat.com/show_bug.cgi?id=1618304
cve.org/CVERecord?id=CVE-2007-1711
nvd.nist.gov/vuln/detail/CVE-2007-1711
access.redhat.com/errata/RHSA-2007:0162
bugzilla.redhat.com/show_bug.cgi?id=235354
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0162.json