Mandrake Linux Security Advisory : gd (MDKSA-2004:132)
Critical Nessus Plugin ID 15737
SynopsisThe remote Mandrake Linux host is missing one or more security updates.
DescriptionInteger overflows were reported in the GD Graphics Library (libgd) 2.0.28, and possibly other versions. These overflows allow remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx() function.
The updated packages have been patched to prevent these issues.
SolutionUpdate the affected packages.