GD Graphics Library Truncated GIF File Remote Denial of Service Vulnerability

Bugtraq ID:	18347
Class:	Design Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Jun 09 2006 12:00AM
Updated:	Jun 09 2006 06:46PM
Credit:	Discovery of this issue is credited to Xavier Roche <[email protected]>.
Vulnerable:	GD Graphics Library gdlib 2.0.33 + Trustix Secure Linux 3.0.5 + Trustix Secure Linux 3.0 + Trustix Secure Linux 2.2
Not Vulnerable:

GD Graphics Library Truncated GIF File Remote Denial of Service Vulnerability

The GD Graphics Library is prone to a denial-of-service vulnerability. Attackers can trigger an infinite-loop condition when the library tries to handle truncated GIF image files.

This issue allows attackers to consume excessive CPU resources on computers that use the affected software. This may deny service to legitimate users.

GD version 2.0.33 is vulnerable to this issue; other versions may also be affected.

GD Graphics Library Truncated GIF File Remote Denial of Service Vulnerability

The following exploit code is sufficient to demonstrate this issue:

• /data/vulnerabilities/exploits/18347.c

GD Graphics Library Truncated GIF File Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected]

GD Graphics Library Truncated GIF File Remote Denial of Service Vulnerability

References:

• gdlib Home Page (GD Graphics Library)
  
• Re: libgd 2.0.33 infinite loop in GIF decoding ? (Xavier Roche )