Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2007-3475

16
FAUCET Score

CVE-2007-3475 describes a denial-of-service vulnerability in the GD Graphics Library (libgd) versions prior to 2.0.35, where a specially crafted GIF image lacking a global color map can cause the application to crash. This vulnerability has a CVSS score of 4.3, indicating a medium attack complexity and a potential for partial availability impact, requiring user interaction for exploitation. There is no known public exploit code available (Metasploit, Nuclei, ExploitDB), and it has received minimal community discussion or media coverage, suggesting it is not actively exploited or widely recognized.

Impacted Technologies

VendorProductVersion(s)CPE
<= 2.0.34CPE matchmatch criteria
cpe:2.3:a:gd_graphics_library:gdlib:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

4.3MEDIUM

AV:N/AC:M/Au:N/C:N/I:N/A:P

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
8.6
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
2.45%
Probability of exploitation in next 30 days
EPSS Percentile
82.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.0245 is in the 73rd percentile among its peer group of 19,953 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: gd-0:2.0.28-5.4E.el4_6.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: gd-0:2.0.33-9.4.el5_1.1
View patch

Vendor Advisories (1)

redhatCVE-2007-3475Low

libgd Denial of service by GIF images without a global color map

Jun 21, 2007

References

ftp.slackware.com / pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz
bugs.libgd.org
fedoranews.org / updates/FEDORA-2007-205.shtml
lists.fedoraproject.org / pipermail/package-announce/2011-January/052848.html
lists.fedoraproject.org / pipermail/package-announce/2011-January/052854.html
bugzilla.redhat.com / show_bug.cgi
secunia.com / advisories/25860
secunia.com / advisories/26272
secunia.com / advisories/26390
secunia.com / advisories/26415
secunia.com / advisories/26467
secunia.com / advisories/26663
secunia.com / advisories/26766
secunia.com / advisories/26856
secunia.com / advisories/29157
secunia.com / advisories/30168
secunia.com / advisories/42813
security.gentoo.org / glsa/glsa-200708-05.xml
security.gentoo.org / glsa/glsa-200711-34.xml
security.gentoo.org / glsa/glsa-200805-13.xml
issues.rpath.com / browse/RPL-1643
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9728
libgd.org / ReleaseNote020035
Patch
mandriva.com / security/advisories
mandriva.com / security/advisories
novell.com / linux/security/advisories/2007_15_sr.html
redhat.com / archives/fedora-package-announce/2007-September/msg00311.html
redhat.com / support/errata/RHSA-2008-0146.html
securityfocus.com / archive/1/478796/100/0/threaded
securityfocus.com / bid/24651
trustix.org / errata/2007/0024
vupen.com / english/advisories/2011/0022