CVE-2007-4986 in ImageMagick

Summary

Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted (1) .dcm, (2) .dib, (3) .xbm, (4) .xcf, or (5) .xwd image file, which triggers a heap-based buffer overflow.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 09/19/2007
• Disclosure: 09/24/2007
• Moderation: VulDB entry created
• Entries: VDB-38930 (1)
• CPE: ready
• CWE: CWE-189 (Confirmed)
• CVSS: 7.3
• EPSS: 0.01545
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-4986
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-4986
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-4986/