Maurycy Prodeus found an integer overflow vulnerability in the way various PDF viewers processed PDF files. An attacker could create a malicious PDF file that could cause tetex to crash and possibly execute arbitrary code open a user opening the file.

In addition, tetex contains an embedded copy of the GD library which suffers from a number of bugs which potentially lead to denial of service and possibly other issues.

Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to have unspecified remote attack vectors and impact. (CVE-2007-3472)

The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure. (CVE-2007-3473)

Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2.0.35 allow user-assisted remote attackers to have unspecified attack vectors and impact.
(CVE-2007-3474)

The GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via a GIF image that has no global color map. (CVE-2007-3475)

Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault.
(CVE-2007-3476)

The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allows attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value. (CVE-2007-3477)

Race condition in gdImageStringFTEx (gdft_draw_bitmap) in gdft.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors, possibly involving truetype font (TTF) support.
(CVE-2007-3478)

Updated packages have been patched to prevent these issues.

- 2010 年 12 月 6 日星期一，Caolan McNamara <caolanm@redhat.com> - 0.2.8.4-27

- 解决了：rhbz#660161 安全问题

请注意，Tenable Network Security 已直接从 Fedora 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

- 2010 年 12 月 6 日星期一，Caolan McNamara <caolanm@redhat.com> - 0.2.8.4-22

- 解决了：rhbz#660161 安全问题

请注意，Tenable Network Security 已直接从 Fedora 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

- 2010 年 12 月 6 日星期一 Caolan McNamara <caolanm at redhat.com> - 0.2.8.4-27

- 解決：rhbz#660161 安全性問題

請注意，Tenable Network Security 已直接從 Fedora 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

- 2010年12月6日（月曜日）Caolan McNamara氏<caolanm at redhat.com> - 0.2.8.4-27

    - 解決：rhbz#660161セキュリティ問題

注意：Tenable Network Security は、前述の記述ブロックを Fedora セキュリティアドバイザリから直接抽出しています。Tenableでは、そこに新しい問題を追加することはせずに、できる限り自動的に整理と書式設定をするようにしています。

- 2010 年 12 月 6 日星期一 Caolan McNamara <caolanm at redhat.com> - 0.2.8.4-22

- 解決：rhbz#660161 安全性問題

請注意，Tenable Network Security 已直接從 Fedora 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

- 2010年12月6日（月曜日）Caolan McNamara氏<caolanm at redhat.com> - 0.2.8.4-22

    - 解決：rhbz#660161セキュリティ問題

注意：Tenable Network Security は、前述の記述ブロックを Fedora セキュリティアドバイザリから直接抽出しています。Tenableでは、そこに新しい問題を追加することはせずに、できる限り自動的に整理と書式設定をするようにしています。

gd had been reported vulnerable to several vulnerabilities :

- CVE-2007-3472: Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers has unspecified attack vectors and impact.

- CVE-2007-3473: The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure.

- CVE-2007-3474: Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2.0.35 allow user-assisted remote attackers to have unspecified attack vectors and impact.

- CVE-2007-3475: The GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via a GIF image that has no global color map.

- CVE-2007-3476: Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault.

- CVE-2007-3477: The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allows attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value.

- CVE-2007-3478: Race condition in gdImageStringFTEx (gdft_draw_bitmap) in gdft.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors, possibly involving truetype font (TTF) support.

The remote host is affected by the vulnerability described in GLSA-200708-05 (GD: Multiple vulnerabilities)

    Xavier Roche discovered an infinite loop in the gdPngReadData()     function when processing a truncated PNG file (CVE-2007-2756). An     integer overflow has been discovered in the gdImageCreateTrueColor()     function (CVE-2007-3472). An error has been discovered in the function     gdImageCreateXbm() function (CVE-2007-3473). Unspecified     vulnerabilities have been discovered in the GIF reader (CVE-2007-3474).
    An error has been discovered when processing a GIF image that has no     global color map (CVE-2007-3475). An array index error has been     discovered in the file gd_gif_in.c when processing images with an     invalid color index (CVE-2007-3476). An error has been discovered in     the imagearc() and imagefilledarc() functions when processing overly     large angle values (CVE-2007-3477). A race condition has been     discovered in the gdImageStringFTEx() function (CVE-2007-3478).
  Impact :

    A remote attacker could exploit one of these vulnerabilities to cause a     Denial of Service or possibly execute arbitrary code with the     privileges of the user running GD.
  Workaround :

    There is no known workaround at this time.

- Wed Sep 5 2007 Ivana varekova <varekova at redhat.com>     2.0.35-1

    - update to 2.0.35

    - fix several vulnerabilities #277421

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Mon Dec 6 2010 Caolan McNamara <caolanm at redhat.com> -     0.2.8.4-22

    - Resolves: rhbz#660161 security issues

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

GD versions prior to 2.0.35 have a number of bugs which potentially lead to denial of service and possibly other issues.

Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to have unspecified remote attack vectors and impact. (CVE-2007-3472)

The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure. (CVE-2007-3473)

Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2.0.35 allow user-assisted remote attackers to have unspecified attack vectors and impact.
(CVE-2007-3474)

The GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via a GIF image that has no global color map. (CVE-2007-3475)

Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault.
(CVE-2007-3476)

The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allows attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value. (CVE-2007-3477)

Race condition in gdImageStringFTEx (gdft_draw_bitmap) in gdft.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors, possibly involving truetype font (TTF) support.
(CVE-2007-3478)

The security issues related to GIF image handling (CVE-2007-3473, CVE-2007-3474, CVE-2007-3475, CVE-2007-3476) do not affect Corporate 3.0, as the version of GD included in these versions does not include GIF support.

Updated packages have been patched to prevent these issues.

- Wed Sep 5 2007 Ivana Varekova <varekova at redhat.com> -     2.0.35-1

    - update to 2.0.35

    - fix several vulnerabilities #277421

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Mon Dec 6 2010 Caolan McNamara <caolanm at redhat.com> -     0.2.8.4-27

    - Resolves: rhbz#660161 security issues

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
25896	Mandrake Linux Security Advisory : tetex (MDKSA-2007:164)	Nessus	Mandriva Local Security Checks	2007/8/15	2021/1/6	medium
51415	Fedora 14：libwmf-0.2.8.4-27.fc14 (2010-19033)	Nessus	Fedora Local Security Checks	2011/1/5	2021/1/11	high
51414	Fedora 13：libwmf-0.2.8.4-22.fc13 (2010-19022)	Nessus	Fedora Local Security Checks	2011/1/5	2021/1/11	high
51415	Fedora 14 : libwmf-0.2.8.4-27.fc14 (2010-19033)	Nessus	Fedora Local Security Checks	2011/1/5	2021/1/11	high
51415	Fedora 14：libwmf-0.2.8.4-27.fc14（2010-19033）	Nessus	Fedora Local Security Checks	2011/1/5	2021/1/11	high
51414	Fedora 13 : libwmf-0.2.8.4-22.fc13 (2010-19022)	Nessus	Fedora Local Security Checks	2011/1/5	2021/1/11	high
51414	Fedora 13：libwmf-0.2.8.4-22.fc13（2010-19022）	Nessus	Fedora Local Security Checks	2011/1/5	2021/1/11	high
25633	FreeBSD : gd -- multiple vulnerabilities (6e099997-25d8-11dc-878b-000c29c5647f)	Nessus	FreeBSD Local Security Checks	2007/7/1	2021/1/6	medium
25870	GLSA-200708-05 : GD: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2007/8/13	2021/1/6	medium
27748	Fedora 7 : gd-2.0.35-1.fc7 (2007-2055)	Nessus	Fedora Local Security Checks	2007/11/6	2021/1/11	medium
51414	Fedora 13 : libwmf-0.2.8.4-22.fc13 (2010-19022)	Nessus	Fedora Local Security Checks	2011/1/5	2021/1/11	high
25875	Mandrake Linux Security Advisory : gd (MDKSA-2007:153)	Nessus	Mandriva Local Security Checks	2007/8/13	2021/1/6	medium
26081	Fedora Core 6 : gd-2.0.35-1.fc6 (2007-692)	Nessus	Fedora Local Security Checks	2007/9/24	2021/1/11	medium
51415	Fedora 14 : libwmf-0.2.8.4-27.fc14 (2010-19033)	Nessus	Fedora Local Security Checks	2011/1/5	2021/1/11	high

検出

プラグインの検索

medium

high

high

high

high

high

high

medium

medium

medium

high

medium

medium

high