ByteOS Network

Vulnerability Details :

CVE-2007-4987

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-24 Sep, 2007 | 22:00

Updated At-07 Aug, 2024 | 15:17

Off-by-one error in the ReadBlobString function in blob.c in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted image file, which triggers the writing of a '\0' character to an out-of-bounds address.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:24 Sep, 2007 | 22:00

Updated At:07 Aug, 2024 | 15:17

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://secunia.com/advisories/27364	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/483572/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://www.ubuntu.com/usn/usn-523-1	vendor-advisory x_refsource_UBUNTU
http://secunia.com/advisories/27309	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/bid/25766	vdb-entry x_refsource_BID
http://www.imagemagick.org/script/changelog.php	x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/36739	vdb-entry x_refsource_XF
http://www.vupen.com/english/advisories/2007/3245	vdb-entry x_refsource_VUPEN
http://security.gentoo.org/glsa/glsa-200710-27.xml	vendor-advisory x_refsource_GENTOO
http://www.securitytracker.com/id?1018729	vdb-entry x_refsource_SECTRACK
http://secunia.com/advisories/27048	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/28721	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/27439	third-party-advisory x_refsource_SECUNIA
https://issues.rpath.com/browse/RPL-1743	x_refsource_CONFIRM
http://www.debian.org/security/2009/dsa-1858	vendor-advisory x_refsource_DEBIAN
http://studio.imagemagick.org/pipermail/magick-announce/2007-September/000037.html	mailing-list x_refsource_MLIST
http://secunia.com/advisories/26926	third-party-advisory x_refsource_SECUNIA
http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:035	vendor-advisory x_refsource_MANDRIVA
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=595	third-party-advisory x_refsource_IDEFENSE
http://bugs.gentoo.org/show_bug.cgi?id=186030	x_refsource_CONFIRM
http://www.novell.com/linux/security/advisories/2007_23_sr.html	vendor-advisory x_refsource_SUSE
http://secunia.com/advisories/36260	third-party-advisory x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/27364

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/archive/1/483572/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://www.ubuntu.com/usn/usn-523-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://secunia.com/advisories/27309

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/bid/25766

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.imagemagick.org/script/changelog.php

Resource:

x_refsource_CONFIRM

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/36739

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://www.vupen.com/english/advisories/2007/3245

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://security.gentoo.org/glsa/glsa-200710-27.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://www.securitytracker.com/id?1018729

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://secunia.com/advisories/27048

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/28721

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/27439

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://issues.rpath.com/browse/RPL-1743

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.debian.org/security/2009/dsa-1858

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://studio.imagemagick.org/pipermail/magick-announce/2007-September/000037.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://secunia.com/advisories/26926

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:035

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=595

Resource:

third-party-advisory

x_refsource_IDEFENSE

Hyperlink: http://bugs.gentoo.org/show_bug.cgi?id=186030

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.novell.com/linux/security/advisories/2007_23_sr.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://secunia.com/advisories/36260

Resource:

third-party-advisory

x_refsource_SECUNIA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://secunia.com/advisories/27364	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/archive/1/483572/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.ubuntu.com/usn/usn-523-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://secunia.com/advisories/27309	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/bid/25766	vdb-entry x_refsource_BID x_transferred
http://www.imagemagick.org/script/changelog.php	x_refsource_CONFIRM x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/36739	vdb-entry x_refsource_XF x_transferred
http://www.vupen.com/english/advisories/2007/3245	vdb-entry x_refsource_VUPEN x_transferred
http://security.gentoo.org/glsa/glsa-200710-27.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://www.securitytracker.com/id?1018729	vdb-entry x_refsource_SECTRACK x_transferred
http://secunia.com/advisories/27048	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/28721	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/27439	third-party-advisory x_refsource_SECUNIA x_transferred
https://issues.rpath.com/browse/RPL-1743	x_refsource_CONFIRM x_transferred
http://www.debian.org/security/2009/dsa-1858	vendor-advisory x_refsource_DEBIAN x_transferred
http://studio.imagemagick.org/pipermail/magick-announce/2007-September/000037.html	mailing-list x_refsource_MLIST x_transferred
http://secunia.com/advisories/26926	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:035	vendor-advisory x_refsource_MANDRIVA x_transferred
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=595	third-party-advisory x_refsource_IDEFENSE x_transferred
http://bugs.gentoo.org/show_bug.cgi?id=186030	x_refsource_CONFIRM x_transferred
http://www.novell.com/linux/security/advisories/2007_23_sr.html	vendor-advisory x_refsource_SUSE x_transferred
http://secunia.com/advisories/36260	third-party-advisory x_refsource_SECUNIA x_transferred

Hyperlink: http://secunia.com/advisories/27364

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/483572/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://www.ubuntu.com/usn/usn-523-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://secunia.com/advisories/27309

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securityfocus.com/bid/25766

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.imagemagick.org/script/changelog.php

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/36739

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2007/3245

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://security.gentoo.org/glsa/glsa-200710-27.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://www.securitytracker.com/id?1018729

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://secunia.com/advisories/27048

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://secunia.com/advisories/28721

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://secunia.com/advisories/27439

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://issues.rpath.com/browse/RPL-1743

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.debian.org/security/2009/dsa-1858

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://studio.imagemagick.org/pipermail/magick-announce/2007-September/000037.html

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://secunia.com/advisories/26926

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:035

Resource:

vendor-advisory

x_refsource_MANDRIVA

x_transferred

Hyperlink: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=595

Resource:

third-party-advisory

x_refsource_IDEFENSE

x_transferred

Hyperlink: http://bugs.gentoo.org/show_bug.cgi?id=186030

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.novell.com/linux/security/advisories/2007_23_sr.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://secunia.com/advisories/36260

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:24 Sep, 2007 | 22:17

Updated At:15 Oct, 2018 | 21:39

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

ImageMagick Studio LLC

>>imagemagick>>5.3.3

cpe:2.3:a:imagemagick:imagemagick:5.3.3:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>5.3.8

cpe:2.3:a:imagemagick:imagemagick:5.3.8:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>5.4.2.3

cpe:2.3:a:imagemagick:imagemagick:5.4.2.3:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>5.4.3

cpe:2.3:a:imagemagick:imagemagick:5.4.3:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>5.4.4.5

cpe:2.3:a:imagemagick:imagemagick:5.4.4.5:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>5.4.7

cpe:2.3:a:imagemagick:imagemagick:5.4.7:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>5.4.8

cpe:2.3:a:imagemagick:imagemagick:5.4.8:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>5.4.8.2_1.1.0

cpe:2.3:a:imagemagick:imagemagick:5.4.8.2_1.1.0:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>5.5.3_.2_1.2.0

cpe:2.3:a:imagemagick:imagemagick:5.5.3_.2_1.2.0:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>5.5.4

cpe:2.3:a:imagemagick:imagemagick:5.5.4:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>5.5.6

cpe:2.3:a:imagemagick:imagemagick:5.5.6:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>5.5.6.0_20030409

cpe:2.3:a:imagemagick:imagemagick:5.5.6.0_20030409:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>5.5.7

cpe:2.3:a:imagemagick:imagemagick:5.5.7:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>5.5.7.15

cpe:2.3:a:imagemagick:imagemagick:5.5.7.15:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.0

cpe:2.3:a:imagemagick:imagemagick:6.0:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.0.1

cpe:2.3:a:imagemagick:imagemagick:6.0.1:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.0.2

cpe:2.3:a:imagemagick:imagemagick:6.0.2:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.0.2.5

cpe:2.3:a:imagemagick:imagemagick:6.0.2.5:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.0.3

cpe:2.3:a:imagemagick:imagemagick:6.0.3:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.0.4

cpe:2.3:a:imagemagick:imagemagick:6.0.4:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.0.4.4

cpe:2.3:a:imagemagick:imagemagick:6.0.4.4:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.0.5

cpe:2.3:a:imagemagick:imagemagick:6.0.5:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.0.6

cpe:2.3:a:imagemagick:imagemagick:6.0.6:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.0.6.2

cpe:2.3:a:imagemagick:imagemagick:6.0.6.2:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.0.7

cpe:2.3:a:imagemagick:imagemagick:6.0.7:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.0.8

cpe:2.3:a:imagemagick:imagemagick:6.0.8:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.1

cpe:2.3:a:imagemagick:imagemagick:6.1:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.1.1

cpe:2.3:a:imagemagick:imagemagick:6.1.1:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.1.2

cpe:2.3:a:imagemagick:imagemagick:6.1.2:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.1.3

cpe:2.3:a:imagemagick:imagemagick:6.1.3:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.1.4

cpe:2.3:a:imagemagick:imagemagick:6.1.4:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.1.5

cpe:2.3:a:imagemagick:imagemagick:6.1.5:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.1.6

cpe:2.3:a:imagemagick:imagemagick:6.1.6:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.1.7

cpe:2.3:a:imagemagick:imagemagick:6.1.7:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.1.8

cpe:2.3:a:imagemagick:imagemagick:6.1.8:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.2

cpe:2.3:a:imagemagick:imagemagick:6.2:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.2.0.3

cpe:2.3:a:imagemagick:imagemagick:6.2.0.3:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.2.0.7

cpe:2.3:a:imagemagick:imagemagick:6.2.0.7:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.2.1

cpe:2.3:a:imagemagick:imagemagick:6.2.1:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.2.2

cpe:2.3:a:imagemagick:imagemagick:6.2.2:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.2.3

cpe:2.3:a:imagemagick:imagemagick:6.2.3:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.2.3.4

cpe:2.3:a:imagemagick:imagemagick:6.2.3.4:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.2.4

cpe:2.3:a:imagemagick:imagemagick:6.2.4:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.2.4.3

cpe:2.3:a:imagemagick:imagemagick:6.2.4.3:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.2.4.5

cpe:2.3:a:imagemagick:imagemagick:6.2.4.5:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.2.5

cpe:2.3:a:imagemagick:imagemagick:6.2.5:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.2.6

cpe:2.3:a:imagemagick:imagemagick:6.2.6:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.2.7

cpe:2.3:a:imagemagick:imagemagick:6.2.7:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.2.8

cpe:2.3:a:imagemagick:imagemagick:6.2.8:*:*:*:*:*:*:*

ImageMagick Studio LLC

>>imagemagick>>6.2.9

cpe:2.3:a:imagemagick:imagemagick:6.2.9:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-189	Primary	nvd@nist.gov

CWE ID: CWE-189

Type: Primary

Source: nvd@nist.gov

Vendor Statements

Organization : Red Hat

Last Modified : 2007-12-05T00:00:00

Note: As the address of the overwritten byte is not under attacker’s control, the worst impact his bug could have is an application crash. It can not be exploited to execute arbitrary code.

References

Hyperlink	Source	Resource
http://bugs.gentoo.org/show_bug.cgi?id=186030	cve@mitre.org	N/A
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=595	cve@mitre.org	N/A
http://secunia.com/advisories/26926	cve@mitre.org	N/A
http://secunia.com/advisories/27048	cve@mitre.org	N/A
http://secunia.com/advisories/27309	cve@mitre.org	N/A
http://secunia.com/advisories/27364	cve@mitre.org	N/A
http://secunia.com/advisories/27439	cve@mitre.org	N/A
http://secunia.com/advisories/28721	cve@mitre.org	N/A
http://secunia.com/advisories/36260	cve@mitre.org	N/A
http://security.gentoo.org/glsa/glsa-200710-27.xml	cve@mitre.org	N/A
http://studio.imagemagick.org/pipermail/magick-announce/2007-September/000037.html	cve@mitre.org	N/A
http://www.debian.org/security/2009/dsa-1858	cve@mitre.org	N/A
http://www.imagemagick.org/script/changelog.php	cve@mitre.org	N/A
http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:035	cve@mitre.org	N/A
http://www.novell.com/linux/security/advisories/2007_23_sr.html	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/483572/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/25766	cve@mitre.org	Exploit Patch
http://www.securitytracker.com/id?1018729	cve@mitre.org	N/A
http://www.ubuntu.com/usn/usn-523-1	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2007/3245	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/36739	cve@mitre.org	N/A
https://issues.rpath.com/browse/RPL-1743	cve@mitre.org	N/A

Hyperlink: http://bugs.gentoo.org/show_bug.cgi?id=186030

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=595

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/26926

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/27048

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/27309

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/27364

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/27439

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/28721

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/36260

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://security.gentoo.org/glsa/glsa-200710-27.xml

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://studio.imagemagick.org/pipermail/magick-announce/2007-September/000037.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.debian.org/security/2009/dsa-1858

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.imagemagick.org/script/changelog.php

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:035

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.novell.com/linux/security/advisories/2007_23_sr.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/archive/1/483572/100/0/threaded

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/25766

Source: cve@mitre.org

Resource:

Exploit

Patch

Hyperlink: http://www.securitytracker.com/id?1018729

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.ubuntu.com/usn/usn-523-1

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2007/3245

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/36739

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://issues.rpath.com/browse/RPL-1743

Source: cve@mitre.org

Resource: N/A

Similar CVEs

102Records found

CVE-2008-0307

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-4.23% / 88.31%

7 Day CHG~0.00%

Published-11 Mar, 2008 | 23:00

Updated-07 Aug, 2024 | 07:39

Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption.

Vendor-n/a SAP SE

Product-maxdb n/a

CWE ID-CWE-189

Not Available

CVE-2007-5348

Matching Score-4

Assigner-Microsoft Corporation

View Details

Matching Score-4

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-76.42% / 98.89%

7 Day CHG~0.00%

Published-10 Sep, 2008 | 15:00

Updated-07 Aug, 2024 | 15:24

Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via an image file with crafted gradient sizes in gradient fill input, which triggers a heap-based buffer overflow related to GdiPlus.dll and VGX.DLL, aka "GDI+ VML Buffer Overrun Vulnerability."

Vendor-n/a Microsoft Corporation

Product-internet_explorer forefront_client_security report_viewer windows-nt windows_xp digital_image_suite sql_server visio windows_vista office office_powerpoint_viewer works office_system windows sql_server_reporting_services server n/a

CWE ID-CWE-189

Not Available

CVE-2007-4987

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs