PT-2007-6098 · Imagemagick+1 · Imagemagick+1

Publicado

2007-09-24

·

Atualizado

2018-10-15

·

CVE-2007-4986

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.3.5-9
Description The issue is related to multiple integer overflows that can be triggered by crafted image files, including .dcm, .dib, .xbm, .xcf, and .xwd formats. This can lead to a heap-based buffer overflow, allowing context-dependent attackers to execute arbitrary code.
Recommendations For versions prior to 6.3.5-9, update to version 6.3.5-9 or later to resolve the issue. As a temporary workaround, consider restricting the processing of potentially malicious image files until the update is applied. Avoid using the vulnerable ImageMagick versions to handle untrusted image files.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2007-4986
DSA-1858-1
DSA-1903-1
DTSA-63-1
RHSA-2008:0145
RHSA-2008:0165
RHSA-2008_0145

Produtos afetados

Imagemagick
Red Hat