CVE-2007-3477: The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attack...

Security readout for executives and security teams

This flaw can let someone make software that uses GD Graphics Library spend excessive CPU while drawing arcs. The business impact is service slowdown or denial of service, not data theft. Urgency depends on whether public-facing image generation accepts attacker-controlled arc angles and whether libgd is older than 2.0.35. Exposure is most likely in legacy systems using libgd directly or through language bindings for dynamic image generation. Risk is higher when untrusted users can influence arc drawing parameters. Systems using vendor-maintained packages newer than the 2007-2008 advisories are less likely affected. Treat as a targeted availability risk for legacy image-rendering services. Prioritize internet-facing or customer-triggered image generation first. If no affected libgd version or untrusted arc input exists, this is lower priority than remotely exploitable code execution issues. Mitigation focus: Upgrade libgd to 2.0.35 or a vendor-fixed package.; Check distribution advisories for the exact fixed package version.; Validate and clamp user-controlled arc angle inputs before rendering..

Prepared

Jun 29, 2026, 04:47 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.