Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2007-3473

26
FAUCET Score

CVE-2007-3473 describes a denial-of-service vulnerability in the gdImageCreateXbm function of the GD Graphics Library (libgd) versions prior to 2.0.35. An attacker could remotely crash systems by exploiting unspecified vectors related to a gdImageCreate failure. This vulnerability has a CVSS score of 4.3, indicating a medium attack complexity and potential for partial availability impact, but no confidentiality or integrity impact. While not actively exploited in the wild and not on the KEV catalog, an ExploitDB entry (EDB-30251) exists, and there is no significant community discussion or media coverage surrounding this older CVE.

Impacted Technologies

VendorProductVersion(s)CPE
<= 2.0.35_rc5CPE matchmatch criteria
cpe:2.3:a:libgd:gd_graphics_library:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

4.3MEDIUM

AV:N/AC:M/Au:N/C:N/I:N/A:P

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
8.6
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
13.31%
Probability of exploitation in next 30 days
EPSS Percentile
96.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
ExploitDB: EDB-30251 · Jun 26, 2007
This CVE's current EPSS score of 0.1331 is in the 96th percentile among its peer group of 19,955 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (5)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: gd-0:2.0.28-5.4E.el4_6.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: gd-0:2.0.33-9.4.el5_1.1
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: libwmf
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: libwmf
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: libwmf

Vendor Advisories (1)

redhatCVE-2007-3473Low

libgd NULL pointer dereference when reading a corrupt X bitmap

Jun 21, 2007

References

ftp.slackware.com / pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz
bugs.libgd.org
fedoranews.org / updates/FEDORA-2007-205.shtml
lists.fedoraproject.org / pipermail/package-announce/2011-January/052848.html
lists.fedoraproject.org / pipermail/package-announce/2011-January/052854.html
osvdb.org / 37744
bugzilla.redhat.com / show_bug.cgi
secunia.com / advisories/25855
Vendor Advisory
secunia.com / advisories/25860
secunia.com / advisories/26272
secunia.com / advisories/26390
secunia.com / advisories/26415
secunia.com / advisories/26467
secunia.com / advisories/26663
secunia.com / advisories/26766
secunia.com / advisories/26856
secunia.com / advisories/29157
secunia.com / advisories/30168
secunia.com / advisories/42813
security.gentoo.org / glsa/glsa-200708-05.xml
security.gentoo.org / glsa/glsa-200711-34.xml
security.gentoo.org / glsa/glsa-200805-13.xml
exchange.xforce.ibmcloud.com / vulnerabilities/35109
issues.rpath.com / browse/RPL-1643
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11806
libgd.org / ReleaseNote020035
mandriva.com / security/advisories
mandriva.com / security/advisories
redhat.com / archives/fedora-package-announce/2007-September/msg00311.html
redhat.com / support/errata/RHSA-2008-0146.html
securityfocus.com / archive/1/478796/100/0/threaded
securityfocus.com / bid/24651
trustix.org / errata/2007/0024
vupen.com / english/advisories/2007/2336
vupen.com / english/advisories/2011/0022