PublicDate: 2007-05-18 18:30:00 UTC Candidate: CVE-2007-2756 References: https://ubuntu.com/security/notices/USN-473-1 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2756 Description: The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG image with truncated data, which causes an infinite loop in the png_read_info function in libpng. Ubuntu-Description: Notes: Priority: untriaged Discovered-by: Assigned-to: CVSS: Bugs: dapper_libgd2: released (2.0.33-2ubuntu5.2) edgy_libgd2: released (2.0.33-4ubuntu2.1) feisty_libgd2: released (2.0.34~rc1-2ubuntu1.1) devel_libgd2: released (2.0.34-1ubuntu1) upstream_libgd2: needs-triage