Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2007-4988

Опубликовано: 19 сент. 2007
Источник: redhat

Описание

Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-190
https://bugzilla.redhat.com/show_bug.cgi?id=310081Integer overflow in ImageMagick's DIB coder

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 18 лет назад

Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.

CVSS3: 7.8
nvd
больше 18 лет назад

Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.

CVSS3: 7.8
debian
больше 18 лет назад

Sign extension error in the ReadDIBImage function in ImageMagick befor ...

CVSS3: 7.8
github
почти 4 года назад

Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.

oracle-oval
почти 18 лет назад

ELSA-2008-0145: ImageMagick security update (MODERATE)