Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2007-1797

Опубликовано: 02 апр. 2007
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which results in a heap-based overflow in the ReadXWDImage function, different issues than CVE-2007-1667.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:imagemagick:imagemagick:6.3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.0.4:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.0.5:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.0.7:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.0.8:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.1.2.:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.1.5:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.1.6:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.1.7:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.2.3:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.2.4:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.2.5:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.2.6:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.2.7:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.2.8:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.3.0:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.3.1:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.3.2:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.3.3:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.3.3.4:*:*:*:*:*:*:*

EPSS

Процентиль: 91%
0.07121
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

ubuntu логотип

CVE-2007-1797

ubuntu
около 18 лет назад

Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which results in a heap-based overflow in the ReadXWDImage function, different issues than CVE-2007-1667.

redhat логотип

CVE-2007-1797

redhat
около 18 лет назад

Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which results in a heap-based overflow in the ReadXWDImage function, different issues than CVE-2007-1667.

debian логотип

CVE-2007-1797

debian
около 18 лет назад

Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote ...

github логотип

GHSA-r8m6-cvrj-9326

github
около 3 лет назад

Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which results in a heap-based overflow in the ReadXWDImage function, different issues than CVE-2007-1667.

oracle-oval логотип

ELSA-2008-0145

oracle-oval
около 17 лет назад

ELSA-2008-0145: ImageMagick security update (MODERATE)

EPSS

Процентиль: 91%
0.07121
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-189