Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2007-4988

Published: 24/09/2007 Updated: 02/02/2024
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Imagemagick

Vulnerability Summary

Sign extension error in the ReadDIBImage function in ImageMagick prior to 6.3.5-9 allows context-dependent malicious users to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.

Vulnerable Product Search on Vulmon Subscribe to Product

imagemagick imagemagick

canonical ubuntu linux 7.04

canonical ubuntu linux 6.10

canonical ubuntu linux 6.06

Vendor Advisories

Ubuntu Security Notice: imagemagick vulnerabilities
Multiple vulnerabilities were found in the image decoders of ImageMagick If a user or automated system were tricked into processing a malicious DCM, DIB, XBM, XCF, or XWD image, a remote attacker could execute arbitrary code with user privileges ...
Debian CVElist Bug Report Logs: CVE-2007-4985, CVE-2007-4986, CVE-2007-4987, CVE-2007-4988 multiple vulnerabilities
Debian Bug report logs - #444267 CVE-2007-4985, CVE-2007-4986, CVE-2007-4987, CVE-2007-4988 multiple vulnerabilities Package: imagemagick; Maintainer for imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Source for imagemagick is src:imagemagick (PTS, buildd, popcon) Reported by: Nico G ...
Debian CVElist Bug Report Logs: CVE-2007-4985, CVE-2007-4986, CVE-2007-4988 multiple vulnerabilities
Debian Bug report logs - #444266 CVE-2007-4985, CVE-2007-4986, CVE-2007-4988 multiple vulnerabilities Package: graphicsmagick; Maintainer for graphicsmagick is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Source for graphicsmagick is src:graphicsmagick (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Dat ...
Debian Security Advisories: DSA-1903-1 graphicsmagick -- several vulnerabilities
Several vulnerabilities have been discovered in graphicsmagick, a collection of image processing tool, which can lead to the execution of arbitrary code, exposure of sensitive information or cause DoS The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-1667 Multiple integer overflows in XInitImage functi ...
Debian Security Advisories: DSA-1858-1 imagemagick -- multiple vulnerabilities
Several vulnerabilities have been discovered in the imagemagick image manipulation programs which can lead to the execution of arbitrary code, exposure of sensitive information or cause DoS The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-1667 Multiple integer overflows in XInitImage function in xwd ...

References

CWE-681http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=597http://studio.imagemagick.org/pipermail/magick-announce/2007-September/000037.htmlhttp://www.securityfocus.com/bid/25765http://www.imagemagick.org/script/changelog.phphttps://issues.rpath.com/browse/RPL-1743http://bugs.gentoo.org/show_bug.cgi?id=186030http://security.gentoo.org/glsa/glsa-200710-27.xmlhttp://www.novell.com/linux/security/advisories/2007_23_sr.htmlhttp://www.ubuntu.com/usn/usn-523-1http://www.securitytracker.com/id?1018729http://secunia.com/advisories/26926http://secunia.com/advisories/27048http://secunia.com/advisories/27309http://secunia.com/advisories/27364http://secunia.com/advisories/27439http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:035http://secunia.com/advisories/28721http://www.redhat.com/support/errata/RHSA-2008-0145.htmlhttp://secunia.com/advisories/29786http://www.debian.org/security/2009/dsa-1858http://secunia.com/advisories/36260http://www.vupen.com/english/advisories/2007/3245https://exchange.xforce.ibmcloud.com/vulnerabilities/36737https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9656http://www.securityfocus.com/archive/1/483572/100/0/threadedhttps://usn.ubuntu.com/523-1/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693CVE-2024-30851CVE-2024-34460CVE-2024-2887localCVE-2024-27956remote code executionCVE-2024-34475privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook