CVE-2007-4985 in ImageMagick

Summary

ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers (1) an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls; or (2) an infinite loop in the ReadXCFImage function, related to ReadBlobMSBLong function calls.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 09/19/2007
• Disclosure: 09/24/2007
• Moderation: VulDB entry created
• Entries: VDB-3332 (3)
• CPE: ready
• CWE: CWE-399 (Confirmed)
• CVSS: 7.5
• EPSS: 0.02770
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-4985
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-4985
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-4985/