The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2.0.33 allows remote attackers to cause a denial of service (CPU consumption) via malformed GIF data that causes an infinite loop.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Graphics_draw_library | Thomas_boutell | 2.0.33 (including) | 2.0.33 (including) |
| Libgd2 | Ubuntu | dapper | * |
| Libgd2 | Ubuntu | devel | * |
| Libgd2 | Ubuntu | edgy | * |
| Libgd2 | Ubuntu | feisty | * |