PT-2007-6099 · Imagemagick · Imagemagick

Regenrecht · Published 2007-09-24 · Updated 2024-06-15 · CVE-2007-4987

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.3.5-9

Description The issue is caused by an off-by-one error in the ReadBlobString function in blob.c, which allows context-dependent attackers to execute arbitrary code via a crafted image file. This error triggers the writing of a '0' character to an out-of-bounds address.

Recommendations For versions prior to 6.3.5-9, update to version 6.3.5-9 or later to resolve the issue. As a temporary workaround, consider restricting the use of the ReadBlobString function in blob.c to minimize the risk of exploitation. Avoid using the function to process untrusted image files until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2007-4987

DSA-1858-1

DTSA-63-1

OPENSUSE-SU-2024:10597-1

Affected Products

Imagemagick

References · 34

• 🔥 http://securityfocus.com/bid/25766 · Exploit
• http://mandriva.com/en/security/advisories?name=MDVSA-2008:035 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10597-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4987 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-4987 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-4987 · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_23_sr.html · Vendor Advisory
• http://ubuntu.com/usn/usn-523-1 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200710-27.xml · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-4987 · Vendor Advisory
• http://debian.org/security/2009/dsa-1858 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36739 · Note
• http://vupen.com/english/advisories/2007/3245 · Note
• http://studio.imagemagick.org/pipermail/magick-announce/2007-September/000037.html · Note
• https://suse.com/security/cve/CVE-2007-4987 · Note