Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2007-1667

Опубликовано: 24 мар. 2007
Источник: nvd
CVSS2: 9.3
EPSS Низкий

Описание

Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service (crash) or obtain sensitive information via crafted images with large or negative values that trigger a buffer overflow.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:x.org:libx11:*:*:*:*:*:*:*:*
Версия до 1.0.2 (включая)
Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*

EPSS

Процентиль: 77%
0.0114
Низкий

9.3 Critical

CVSS2

Дефекты

CWE-189

Связанные уязвимости

ubuntu
около 18 лет назад

Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service (crash) or obtain sensitive information via crafted images with large or negative values that trigger a buffer overflow.

redhat
больше 18 лет назад

Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service (crash) or obtain sensitive information via crafted images with large or negative values that trigger a buffer overflow.

debian
около 18 лет назад

Multiple integer overflows in (1) the XGetPixel function in ImUtil.c i ...

github
около 3 лет назад

Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service (crash) or obtain sensitive information via crafted images with large or negative values that trigger a buffer overflow.

oracle-oval
почти 18 лет назад

ELSA-2007-0157: Moderate: xorg-x11-apps/libX11 security updates (MODERATE)

EPSS

Процентиль: 77%
0.0114
Низкий

9.3 Critical

CVSS2

Дефекты

CWE-189