CVE-2007-4988

Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted…

published September 24, 2007

CVSS
—
EPSS
3%
Percentile
87.6
In the wild
Unconfirmed
What it is

Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03093 · 87.6th percentile
Published
2007-09-24T22:00Z
EPSS history
Timeline
  • 24 SEP 22:00Z
    Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted…
    cvelistv5