CVE-2006-4484

Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in...

2.6 LowFix available

CVE-2006-4484 is a low vulnerability (CVSS 2.6) in Php, published August 31, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.68%, the 95th percentile. Fixed in libgd2 2.0.33-5.1.

Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array.

Exploit likelihood

8.68%Up 4.3 points since Feb 4, 2022

What each source reports

NVD Score used 2.6

Record: CVE-2006-4484
CVSS 2.0: 2.6 LowAV:N/AC:H/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2006-4484
Updated: 2026-11-02

EUVDEUVD-2006-4472 No score

Record: EUVD-2006-4472
Updated: 2026-11-03

GitHub AdvisoriesGHSA-6xv8-25r4-5mrf No score

Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in...

Record: GHSA-6xv8-25r4-5mrf
Updated: 2026-11-02

OSV No score

Record: CVE-2006-4484
Updated: 2026-11-02

OSVDEBIAN-CVE-2006-4484 No score

Record: DEBIAN-CVE-2006-4484
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10484-1 No score

perl-Tk-804.033-1.10 on GA media

These are all security issues fixed in the perl-Tk-804.033-1.10 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10484-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`libgd2` Debian:12	before 2.0.33-5.1	2.0.33-5.1
`libgd2` Debian:13	before 2.0.33-5.1	2.0.33-5.1
`libgd2` Debian:14	before 2.0.33-5.1	2.0.33-5.1
`xloadimage` Debian:12	All versions, plus listed versions 4.1-254.1-264.1-27	None known
`xloadimage` Debian:13	All versions, plus listed versions 4.1-264.1-27	None known
`xloadimage` Debian:14	All versions, plus listed versions 4.1-264.1-27	None known
`php` Red Hat:enterprise_linux:3::as	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-debuginfo` Red Hat:enterprise_linux:3::as	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-devel` Red Hat:enterprise_linux:3::as	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-imap` Red Hat:enterprise_linux:3::as	before 0:4.3.2-36.ent	0:4.3.2-36.ent

Show 133 moreShow less

Affected packages
Package	Affected	Fixed
`php-ldap` Red Hat:enterprise_linux:3::as	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-mysql` Red Hat:enterprise_linux:3::as	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-odbc` Red Hat:enterprise_linux:3::as	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-pgsql` Red Hat:enterprise_linux:3::as	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-devel` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-imap` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-ldap` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-mysql` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-odbc` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-pgsql` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php` Red Hat:enterprise_linux:3::es	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-debuginfo` Red Hat:enterprise_linux:3::es	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-devel` Red Hat:enterprise_linux:3::es	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-imap` Red Hat:enterprise_linux:3::es	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-ldap` Red Hat:enterprise_linux:3::es	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-mysql` Red Hat:enterprise_linux:3::es	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-odbc` Red Hat:enterprise_linux:3::es	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-pgsql` Red Hat:enterprise_linux:3::es	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-devel` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-imap` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-ldap` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-mysql` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-odbc` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php-pgsql` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-36.ent	0:4.3.2-36.ent
`php` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-debuginfo` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-devel` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-domxml` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-gd` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-imap` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-ldap` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-mbstring` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-mysql` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-ncurses` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-odbc` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-pear` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-pgsql` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-snmp` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-xmlrpc` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.18	0:4.3.9-3.18
`php` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-devel` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-domxml` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-gd` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-imap` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-ldap` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-mbstring` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-mysql` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-ncurses` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-odbc` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-pear` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-pgsql` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-snmp` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-xmlrpc` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.18	0:4.3.9-3.18
`php` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-debuginfo` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-devel` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-domxml` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-gd` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-imap` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-ldap` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-mbstring` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-mysql` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-ncurses` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-odbc` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-pear` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-pgsql` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-snmp` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-xmlrpc` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.18	0:4.3.9-3.18
`php` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-devel` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-domxml` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-gd` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-imap` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-ldap` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-mbstring` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-mysql` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-ncurses` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-odbc` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-pear` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-pgsql` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-snmp` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.18	0:4.3.9-3.18
`php-xmlrpc` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.18	0:4.3.9-3.18
`php` Red Hat:rhel_application_stack:1	before 0:5.1.4-1.el4s1.4	0:5.1.4-1.el4s1.4
`php-bcmath` Red Hat:rhel_application_stack:1	before 0:5.1.4-1.el4s1.4	0:5.1.4-1.el4s1.4
`php-dba` Red Hat:rhel_application_stack:1	before 0:5.1.4-1.el4s1.4	0:5.1.4-1.el4s1.4
`php-debuginfo` Red Hat:rhel_application_stack:1	before 0:5.1.4-1.el4s1.4	0:5.1.4-1.el4s1.4
`php-devel` Red Hat:rhel_application_stack:1	before 0:5.1.4-1.el4s1.4	0:5.1.4-1.el4s1.4
`php-gd` Red Hat:rhel_application_stack:1	before 0:5.1.4-1.el4s1.4	0:5.1.4-1.el4s1.4
`php-imap` Red Hat:rhel_application_stack:1	before 0:5.1.4-1.el4s1.4	0:5.1.4-1.el4s1.4
`php-ldap` Red Hat:rhel_application_stack:1	before 0:5.1.4-1.el4s1.4	0:5.1.4-1.el4s1.4
`php-mbstring` Red Hat:rhel_application_stack:1	before 0:5.1.4-1.el4s1.4	0:5.1.4-1.el4s1.4
`php-mysql` Red Hat:rhel_application_stack:1	before 0:5.1.4-1.el4s1.4	0:5.1.4-1.el4s1.4
`php-ncurses` Red Hat:rhel_application_stack:1	before 0:5.1.4-1.el4s1.4	0:5.1.4-1.el4s1.4
`php-odbc` Red Hat:rhel_application_stack:1	before 0:5.1.4-1.el4s1.4	0:5.1.4-1.el4s1.4
`php-pdo` Red Hat:rhel_application_stack:1	before 0:5.1.4-1.el4s1.4	0:5.1.4-1.el4s1.4
`php-pgsql` Red Hat:rhel_application_stack:1	before 0:5.1.4-1.el4s1.4	0:5.1.4-1.el4s1.4
`php-snmp` Red Hat:rhel_application_stack:1	before 0:5.1.4-1.el4s1.4	0:5.1.4-1.el4s1.4
`php-soap` Red Hat:rhel_application_stack:1	before 0:5.1.4-1.el4s1.4	0:5.1.4-1.el4s1.4
`php-xml` Red Hat:rhel_application_stack:1	before 0:5.1.4-1.el4s1.4	0:5.1.4-1.el4s1.4
`php-xmlrpc` Red Hat:rhel_application_stack:1	before 0:5.1.4-1.el4s1.4	0:5.1.4-1.el4s1.4
`gd` Red Hat:enterprise_linux:4::as	before 0:2.0.28-5.4E.el4_6.1	0:2.0.28-5.4E.el4_6.1
`gd-debuginfo` Red Hat:enterprise_linux:4::as	before 0:2.0.28-5.4E.el4_6.1	0:2.0.28-5.4E.el4_6.1
`gd-devel` Red Hat:enterprise_linux:4::as	before 0:2.0.28-5.4E.el4_6.1	0:2.0.28-5.4E.el4_6.1
`gd-progs` Red Hat:enterprise_linux:4::as	before 0:2.0.28-5.4E.el4_6.1	0:2.0.28-5.4E.el4_6.1
`gd` Red Hat:enterprise_linux:4::desktop	before 0:2.0.28-5.4E.el4_6.1	0:2.0.28-5.4E.el4_6.1
`gd-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:2.0.28-5.4E.el4_6.1	0:2.0.28-5.4E.el4_6.1
`gd-devel` Red Hat:enterprise_linux:4::desktop	before 0:2.0.28-5.4E.el4_6.1	0:2.0.28-5.4E.el4_6.1
`gd-progs` Red Hat:enterprise_linux:4::desktop	before 0:2.0.28-5.4E.el4_6.1	0:2.0.28-5.4E.el4_6.1
`gd` Red Hat:enterprise_linux:4::es	before 0:2.0.28-5.4E.el4_6.1	0:2.0.28-5.4E.el4_6.1
`gd-debuginfo` Red Hat:enterprise_linux:4::es	before 0:2.0.28-5.4E.el4_6.1	0:2.0.28-5.4E.el4_6.1
`gd-devel` Red Hat:enterprise_linux:4::es	before 0:2.0.28-5.4E.el4_6.1	0:2.0.28-5.4E.el4_6.1
`gd-progs` Red Hat:enterprise_linux:4::es	before 0:2.0.28-5.4E.el4_6.1	0:2.0.28-5.4E.el4_6.1
`gd` Red Hat:enterprise_linux:4::ws	before 0:2.0.28-5.4E.el4_6.1	0:2.0.28-5.4E.el4_6.1
`gd-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:2.0.28-5.4E.el4_6.1	0:2.0.28-5.4E.el4_6.1
`gd-devel` Red Hat:enterprise_linux:4::ws	before 0:2.0.28-5.4E.el4_6.1	0:2.0.28-5.4E.el4_6.1
`gd-progs` Red Hat:enterprise_linux:4::ws	before 0:2.0.28-5.4E.el4_6.1	0:2.0.28-5.4E.el4_6.1
`gd` Red Hat:enterprise_linux:5::client_workstation	before 0:2.0.33-9.4.el5_1.1	0:2.0.33-9.4.el5_1.1
`gd-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 0:2.0.33-9.4.el5_1.1	0:2.0.33-9.4.el5_1.1
`gd-devel` Red Hat:enterprise_linux:5::client_workstation	before 0:2.0.33-9.4.el5_1.1	0:2.0.33-9.4.el5_1.1
`gd` Red Hat:enterprise_linux:5::client	before 0:2.0.33-9.4.el5_1.1	0:2.0.33-9.4.el5_1.1
`gd-debuginfo` Red Hat:enterprise_linux:5::client	before 0:2.0.33-9.4.el5_1.1	0:2.0.33-9.4.el5_1.1
`gd-progs` Red Hat:enterprise_linux:5::client	before 0:2.0.33-9.4.el5_1.1	0:2.0.33-9.4.el5_1.1
`gd` Red Hat:enterprise_linux:5::server	before 0:2.0.33-9.4.el5_1.1	0:2.0.33-9.4.el5_1.1
`gd-debuginfo` Red Hat:enterprise_linux:5::server	before 0:2.0.33-9.4.el5_1.1	0:2.0.33-9.4.el5_1.1
`gd-devel` Red Hat:enterprise_linux:5::server	before 0:2.0.33-9.4.el5_1.1	0:2.0.33-9.4.el5_1.1
`gd-progs` Red Hat:enterprise_linux:5::server	before 0:2.0.33-9.4.el5_1.1	0:2.0.33-9.4.el5_1.1
`perl-Tk` openSUSE:Tumbleweed	before 804.033-1.10	804.033-1.10

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 113 moreShow less