gd denial of service
A flaw was found in the way gd loads certain malformed GIF images. If
a user loads a broken GIF image it is possible to cause gd to enter an
There is more information in the bugtraq mail:
This issue also affects FC4
Created attachment 130771 [details]
Testcase based on the C in the bugtraq mail.
This testcase doesn't seem to crash when loading a gif image via a file stream,
but does when the data is loaded via a pointer.