CVE-2007-4986
Published: 24 September 2007
Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted (1) .dcm, (2) .dib, (3) .xbm, (4) .xcf, or (5) .xwd image file, which triggers a heap-based buffer overflow.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
graphicsmagick Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
| edgy |
Ignored
(end of life, was needed)
|
|
| feisty |
Ignored
(end of life, was needed)
|
|
| gutsy |
Ignored
(end of life, was needed)
|
|
| hardy |
Released
(1.1.11-1)
|
|
| intrepid |
Released
(1.1.11-1)
|
|
| upstream |
Released
(1.1.11)
|
|
|
imagemagick Launchpad, Ubuntu, Debian |
dapper |
Released
(6:6.2.4.5-0.6ubuntu0.7)
|
| edgy |
Released
(7:6.2.4.5.dfsg1-0.10ubuntu0.4)
|
|
| feisty |
Released
(7:6.2.4.5.dfsg1-0.14ubuntu0.2)
|
|
| gutsy |
Released
(7:6.2.4.5.dfsg1-2ubuntu1)
|
|
| hardy |
Released
(7:6.2.4.5.dfsg1-2ubuntu1)
|
|
| intrepid |
Released
(7:6.2.4.5.dfsg1-2ubuntu1)
|
|
| upstream |
Released
(6.3.5-9)
|