CVE-2007-1797

2007-04-0200:00:00

ubuntu.com

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.224 Low

EPSS

Percentile

96.4%

JSON

Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote
attackers to execute arbitrary code via (1) a crafted DCM image, which
results in a heap-based overflow in the ReadDCMImage function, or (2) the
(a) colors or (b) comments field in a crafted XWD image, which results in a
heap-based overflow in the ReadXWDImage function, different issues than
CVE-2007-1667.

OSVersionArchitecturePackageVersionFilename
ubuntu7.10noarchgraphicsmagick< 1.1.8-1UNKNOWN
ubuntu8.04noarchgraphicsmagick< 1.1.8-1UNKNOWN
ubuntu6.06noarchimagemagick< 6.2.4.5-0.6ubuntu0.6UNKNOWN
ubuntu6.10noarchimagemagick< 6.2.4.5.dfsg1-0.10ubuntu0.3UNKNOWN
ubuntu7.04noarchimagemagick< 6.2.4.5.dfsg1-0.14ubuntu0.1UNKNOWN
ubuntu7.10noarchimagemagick< 6.2.4.5.dfsg1-1ubuntu1UNKNOWN
ubuntu8.04noarchimagemagick< 6.2.4.5.dfsg1-1ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	7.10	noarch	graphicsmagick	< 1.1.8-1	UNKNOWN
ubuntu	8.04	noarch	graphicsmagick	< 1.1.8-1	UNKNOWN
ubuntu	6.06	noarch	imagemagick	< 6.2.4.5-0.6ubuntu0.6	UNKNOWN
ubuntu	6.10	noarch	imagemagick	< 6.2.4.5.dfsg1-0.10ubuntu0.3	UNKNOWN
ubuntu	7.04	noarch	imagemagick	< 6.2.4.5.dfsg1-0.14ubuntu0.1	UNKNOWN
ubuntu	7.10	noarch	imagemagick	< 6.2.4.5.dfsg1-1ubuntu1	UNKNOWN
ubuntu	8.04	noarch	imagemagick	< 6.2.4.5.dfsg1-1ubuntu1	UNKNOWN