CVE-2007-3996
Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial...
Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.
Exploit likelihood
What each source reports
NVD Score used 6.8
Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.
- Record
CVE-2007-3996- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE ListNo score
Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.
- Record
CVE-2007-3996- Updated
- 2026-11-02
EUVDEUVD-2007-3980No score
Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.
- Record
EUVD-2007-3980- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8378-c84x-wpqvNo score
Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial...
Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.
- Record
GHSA-8378-c84x-wpqv- Updated
- 2026-11-02
OSVNo score
Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.
- Record
CVE-2007-3996- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-3996No score
Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.
- Record
DEBIAN-CVE-2007-3996- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2007-3996No score
CVE-2007-3996 in libwmf - Patched by Root
Root has patched CVE-2007-3996 in the libwmf package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2007-3996- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libgd2Debian:12 | before 2.0.35.dfsg-1 | 2.0.35.dfsg-1 |
libgd2Debian:13 | before 2.0.35.dfsg-1 | 2.0.35.dfsg-1 |
libgd2Debian:14 | before 2.0.35.dfsg-1 | 2.0.35.dfsg-1 |
libwmfDebian:12 | All versions, plus listed versions 0.2.12-5.10.2.12-5.20.2.13-10.2.13-1.10.2.13-20.2.14-1 | None known |
libwmfDebian:13 | All versions, plus listed versions 0.2.13-1.10.2.13-20.2.14-1 | None known |
libwmfDebian:14 | All versions, plus listed versions 0.2.13-1.10.2.13-20.2.14-1 | None known |
racketDebian:12 | before 5.0.2-1 | 5.0.2-1 |
racketDebian:13 | before 5.0.2-1 | 5.0.2-1 |
racketDebian:14 | before 5.0.2-1 | 5.0.2-1 |
libgd2Debian:4.0 From an advisory covering 5 CVEs | before 2.0.33-5.2etch1, plus listed versions 2.0.33-5.2 | 2.0.33-5.2etch1 |
Show 206 moreShow less
| Package | Affected | Fixed |
|---|---|---|
phpRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-develRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-imapRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-ldapRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-manualRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-mysqlRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-odbcRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-pgsqlRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
phpRed Hat:enterprise_linux:2.1::aw From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-imapRed Hat:enterprise_linux:2.1::aw From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-ldapRed Hat:enterprise_linux:2.1::aw From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-manualRed Hat:enterprise_linux:2.1::aw From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-mysqlRed Hat:enterprise_linux:2.1::aw From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-odbcRed Hat:enterprise_linux:2.1::aw From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-pgsqlRed Hat:enterprise_linux:2.1::aw From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
phpRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-develRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-imapRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-ldapRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-manualRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-mysqlRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-odbcRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-pgsqlRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
phpRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-imapRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-ldapRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-manualRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-mysqlRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-odbcRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-pgsqlRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs | before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
phpRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-develRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-imapRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-ldapRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-mysqlRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-odbcRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-pgsqlRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
phpRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-develRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-imapRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-ldapRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-mysqlRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-odbcRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-pgsqlRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
phpRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-develRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-imapRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-ldapRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-mysqlRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-odbcRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-pgsqlRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
phpRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-develRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-imapRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-ldapRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-mysqlRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-odbcRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-pgsqlRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs | before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
phpRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-develRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-domxmlRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-gdRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-imapRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-ldapRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-mbstringRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-mysqlRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-ncursesRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-odbcRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-pearRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-pgsqlRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-snmpRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-xmlrpcRed Hat:enterprise_linux:4::as From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
phpRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-develRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-domxmlRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-gdRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-imapRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-ldapRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-mbstringRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-mysqlRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-ncursesRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-odbcRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-pearRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-pgsqlRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-snmpRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
phpRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-develRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-domxmlRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-gdRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-imapRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-ldapRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-mbstringRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-mysqlRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-ncursesRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-odbcRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-pearRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-pgsqlRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-snmpRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-xmlrpcRed Hat:enterprise_linux:4::es From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
phpRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-develRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-domxmlRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-gdRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-imapRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-ldapRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-mbstringRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-mysqlRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-ncursesRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-odbcRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-pearRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-pgsqlRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-snmpRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
php-xmlrpcRed Hat:enterprise_linux:4::ws From an advisory covering 7 CVEs | before 0:4.3.9-3.22.9 | 0:4.3.9-3.22.9 |
phpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-cliRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-commonRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-dbaRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-gdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-imapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-ldapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-odbcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-pdoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-snmpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-soapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-xmlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
phpRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-bcmathRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-cliRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-commonRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-dbaRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-develRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-gdRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-imapRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-ldapRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-mbstringRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-mysqlRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-ncursesRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-odbcRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-pdoRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-pgsqlRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-snmpRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-soapRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-xmlRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
php-xmlrpcRed Hat:enterprise_linux:5::server From an advisory covering 7 CVEs | before 0:5.1.6-15.el5 | 0:5.1.6-15.el5 |
phpRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-bcmathRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-cliRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-commonRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-dbaRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-debuginfoRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-develRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-gdRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-imapRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-ldapRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-mbstringRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-mysqlRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-ncursesRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-odbcRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-pdoRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-pgsqlRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-snmpRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-soapRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-xmlRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
php-xmlrpcRed Hat:rhel_application_stack:1 From an advisory covering 7 CVEs | before 0:5.1.6-3.el4s1.8 | 0:5.1.6-3.el4s1.8 |
phpRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-bcmathRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-cliRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-commonRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-dbaRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-develRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-gdRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-imapRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-ldapRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-mbstringRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-mysqlRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-ncursesRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-odbcRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-pdoRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-pgsqlRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-snmpRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-soapRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-xmlRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
php-xmlrpcRed Hat:rhel_application_stack:2 From an advisory covering 7 CVEs | before 0:5.2.3-3.el5s2 | 0:5.2.3-3.el5s2 |
libwmfRoot:Debian:12 | before 0.2.12-5.1.root.io.5 | 0.2.12-5.1.root.io.50.2.12-5.1.root.io.60.2.12-5.1.aikido.7 |
rootio-libwmfRoot:Debian:12 | before 0.2.12-5.1.root.io.5 | 0.2.12-5.1.root.io.50.2.12-5.1.root.io.60.2.12-5.1.aikido.7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3996 is a medium vulnerability (CVSS 6.8) in Php, published September 4, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.22%, the 91st percentile. Fixed in libgd2 2.0.35.dfsg-1.
References
secunia.com/advisories/26822
security.gentoo.org/glsa/glsa-200712-13.xml
debian.org/security/2008/dsa-1613
redhat.com/support/errata/RHSA-2007-0888.html
exchange.xforce.ibmcloud.com/vulnerabilities/36382
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11147
Show 88 moreShow less
lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html
secunia.com/advisories/28658
redhat.com/archives/fedora-package-announce/2007-September/msg00354.html
bugs.gentoo.org/show_bug.cgi?id=201546
secunia.com/advisories/26967
secunia.com/advisories/27351
gentoo.org/security/en/glsa/glsa-200710-02.xml
secunia.com/advisories/31168
php.net/ChangeLog-5.php
secunia.com/advisories/26930
trustix.org/errata/2007/0026
rhn.redhat.com/errata/RHSA-2007-0889.html
secweb.se/en/advisories/php-imagecopyresized-integer-overflow
issues.rpath.com/browse/RPL-1693
secweb.se/en/advisories/php-imagecreatetruecolor-integer-overflow
issues.rpath.com/browse/RPL-1702
secunia.com/advisories/27545
support.avaya.com/elmodocs2/security/ASA-2007-449.htm
ubuntu.com/usn/usn-557-1
secunia.com/advisories/26838
securityreason.com/securityalert/3103
secunia.com/advisories/27377
secunia.com/advisories/28009
mandriva.com/security/advisories?name=MDKSA-2007:187
secunia.com/advisories/27102
vupen.com/english/advisories/2007/3023
php.net/releases/5_2_4.php
secunia.com/advisories/28147
secunia.com/advisories/26895
redhat.com/support/errata/RHSA-2007-0890.html
redhat.com/support/errata/RHSA-2007-0891.html
secunia.com/advisories/26871
exchange.xforce.ibmcloud.com/vulnerabilities/36383
secunia.com/advisories/26642
nvd.nist.gov/vuln/detail/CVE-2007-3996
github.com/advisories/GHSA-8378-c84x-wpqv
security-tracker.debian.org/tracker/CVE-2007-3996
access.redhat.com/errata/RHSA-2007:0888
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=239014
bugzilla.redhat.com/show_bug.cgi?id=242032
bugzilla.redhat.com/show_bug.cgi?id=250726
bugzilla.redhat.com/show_bug.cgi?id=278031
bugzilla.redhat.com/show_bug.cgi?id=278041
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0888.json
access.redhat.com/security/cve/CVE-2007-2509
cve.org/CVERecord?id=CVE-2007-2509
nvd.nist.gov/vuln/detail/CVE-2007-2509
access.redhat.com/security/cve/CVE-2007-2872
cve.org/CVERecord?id=CVE-2007-2872
nvd.nist.gov/vuln/detail/CVE-2007-2872
access.redhat.com/security/cve/CVE-2007-3799
cve.org/CVERecord?id=CVE-2007-3799
nvd.nist.gov/vuln/detail/CVE-2007-3799
access.redhat.com/security/cve/CVE-2007-3996
cve.org/CVERecord?id=CVE-2007-3996
access.redhat.com/security/cve/CVE-2007-4670
cve.org/CVERecord?id=CVE-2007-4670
nvd.nist.gov/vuln/detail/CVE-2007-4670
access.redhat.com/errata/RHSA-2007:0889
bugzilla.redhat.com/show_bug.cgi?id=242033
bugzilla.redhat.com/show_bug.cgi?id=276081
bugzilla.redhat.com/show_bug.cgi?id=278011
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0889.json
access.redhat.com/security/cve/CVE-2007-2756
cve.org/CVERecord?id=CVE-2007-2756
nvd.nist.gov/vuln/detail/CVE-2007-2756
access.redhat.com/security/cve/CVE-2007-3998
cve.org/CVERecord?id=CVE-2007-3998
nvd.nist.gov/vuln/detail/CVE-2007-3998
access.redhat.com/security/cve/CVE-2007-4658
cve.org/CVERecord?id=CVE-2007-4658
nvd.nist.gov/vuln/detail/CVE-2007-4658
access.redhat.com/errata/RHSA-2007:0890
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0890.json
access.redhat.com/errata/RHSA-2007:0891
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0891.json
access.redhat.com/errata/RHSA-2007:0917
bugzilla.redhat.com/show_bug.cgi?id=276531
bugzilla.redhat.com/show_bug.cgi?id=278161
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0917.json
access.redhat.com/security/cve/CVE-2007-4659
cve.org/CVERecord?id=CVE-2007-4659
nvd.nist.gov/vuln/detail/CVE-2007-4659
access.redhat.com/security/cve/CVE-2007-4661
cve.org/CVERecord?id=CVE-2007-4661
nvd.nist.gov/vuln/detail/CVE-2007-4661