Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2007-4988

Опубликовано: 19 сент. 2007
Источник: redhat
EPSS Низкий

Описание

Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-190
https://bugzilla.redhat.com/show_bug.cgi?id=310081Integer overflow in ImageMagick's DIB coder

EPSS

Процентиль: 83%
0.0199
Низкий

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 18 лет назад

Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.

CVSS3: 7.8
nvd
почти 18 лет назад

Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.

CVSS3: 7.8
debian
почти 18 лет назад

Sign extension error in the ReadDIBImage function in ImageMagick befor ...

CVSS3: 7.8
github
больше 3 лет назад

Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.

oracle-oval
больше 17 лет назад

ELSA-2008-0145: ImageMagick security update (MODERATE)

EPSS

Процентиль: 83%
0.0199
Низкий