CVE-2007-4987

2007-09-2400:00:00

ubuntu.com

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

74.3%

JSON

Off-by-one error in the ReadBlobString function in blob.c in ImageMagick
before 6.3.5-9 allows context-dependent attackers to execute arbitrary code
via a crafted image file, which triggers the writing of a ‘\0’ character to
an out-of-bounds address.

Bugs

<https://bugs.launchpad.net/ubuntu/gutsy/+source/graphicsmagick/+bug/144425>

Notes

Author	Note
fujitsu	graphicsmagick doesn’t contain the vulnerable code.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchimagemagick< 6:6.2.4.5-0.6ubuntu0.7UNKNOWN
ubuntu6.10noarchimagemagick< 7:6.2.4.5.dfsg1-0.10ubuntu0.4UNKNOWN
ubuntu7.04noarchimagemagick< 7:6.2.4.5.dfsg1-0.14ubuntu0.2UNKNOWN
ubuntu7.10noarchimagemagick< 7:6.2.4.5.dfsg1-2ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	imagemagick	< 6:6.2.4.5-0.6ubuntu0.7	UNKNOWN
ubuntu	6.10	noarch	imagemagick	< 7:6.2.4.5.dfsg1-0.10ubuntu0.4	UNKNOWN
ubuntu	7.04	noarch	imagemagick	< 7:6.2.4.5.dfsg1-0.14ubuntu0.2	UNKNOWN
ubuntu	7.10	noarch	imagemagick	< 7:6.2.4.5.dfsg1-2ubuntu1	UNKNOWN