Ubuntu Security Notice (C) 2007-2013 Canonical, Inc. / NASL script (C) 2007-2013 Tenable Network Security, Inc.
The remote Ubuntu host is missing one or more security-related patches.
A buffer overflow was discovered in libgd2's font renderer. By
tricking an application using libgd2 into rendering a specially
crafted string with a JIS encoded font, a remote attacker could read
heap memory or crash the application, leading to a denial of service.
Xavier Roche discovered that libgd2 did not correctly validate PNG
callback results. If an application were tricked into processing a
specially crafted PNG image, it would monopolize CPU resources. Since
libgd2 is often used in PHP and Perl web applications, this could lead
to a remote denial of service. (CVE-2007-2756).
Update the affected packages.
Risk factor :
High / CVSS Base Score : 7.5