← Database

CVE-2006-2906

MEDIUM CVSS: 5.4 Published: 2006-06-08 Modified: 2026-06-16

Description

The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2.0.33 allows remote attackers to cause a denial of service (CPU consumption) via malformed GIF data that causes an infinite loop.

Affected Platforms

Thomas Boutell Graphics Draw Library

Weakness Type

NVD-CWE-Other

References