Mandriva Linux Security Advisory – Buffer overflow in the gdImageStringFTEx function in gdft.c in the GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted string with a JIS encoded font. Tetex 3.x uses an embedded copy of the gd source and may also be affected by this issue. A buffer overflow in the open_sty function for makeindex in Tetex could allow user-assisted remote attackers to overwrite files and possibly execute arbitrary code via a long filename.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/56932/MDKSA-2007-109.txt
Source: https://packetstormsecurity.com/files/56932/Mandriva-Linux-Security-Advisory-2007.109.html