Mandriva Linux Security Advisory – Buffer overflow in the LWZReadByte() function in gd_gif_in.c in GD prior to 2.0.34 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array. This was originally fixed in PHP’s embedded GD with MDKSA-2006:162; patches had not been applied to the system libgd at that time.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/63387/MDVSA-2008-038.txt
Source: https://packetstormsecurity.com/files/63387/Mandriva-Linux-Security-Advisory-2008-038.html