FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2007-4986

This CVE name corresponds to:

Entered Topic
2007-10-10 ImageMagick -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2007-4986
Phase Assigned(20070919)

Description

Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted (1) .dcm, (2) .dib, (3) .xbm, (4) .xcf, or (5) .xwd image file, which triggers a heap-based buffer overflow.

References

Source Reference
IDEFENSE 20070919 Multiple Vendor ImageMagick Multiple Integer Overflow Vulnerabilities
BUGTRAQ 20071112 FLEA-2007-0066-1 ImageMagick
MLIST [Magick-announce] 20070917 ImageMagick 6.3.5-9, important security updates
CONFIRM http://www.imagemagick.org/script/changelog.php
CONFIRM https://issues.rpath.com/browse/RPL-1743
CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=186030
DEBIAN DSA-1858
GENTOO GLSA-200710-27
MANDRIVA MDVSA-2008:035
REDHAT RHSA-2008:0145
REDHAT RHSA-2008:0165
SUSE SUSE-SR:2007:023
UBUNTU USN-523-1
BID 25763
OVAL oval:org.mitre.oval:def:9963
SECUNIA 35316
SECUNIA 36260
VUPEN ADV-2007-3245
SECTRACK 1018729
SECUNIA 26926
SECUNIA 27048
SECUNIA 27309
SECUNIA 27364
SECUNIA 27439
SECUNIA 28721
SECUNIA 29786
SECUNIA 29857
XF imagemagick-multiplefunctions-bo(36738)