Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2007-4987
HistorySep 24, 2007 - 10:17 p.m.

CVE-2007-4987

2007-09-2422:17:00
CWE-189
mitre
web.nvd.nist.gov
42
cve-2007-4987
imagemagick
readblobstring
arbitrary code execution
security vulnerability
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.004

Percentile

72.8%

JSON

Off-by-one error in the ReadBlobString function in blob.c in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted image file, which triggers the writing of a β€˜\0’ character to an out-of-bounds address.

Affected configurations

Nvd
Node
imagemagickimagemagickMatch5.3.3
OR
imagemagickimagemagickMatch5.3.8
OR
imagemagickimagemagickMatch5.4.2.3
OR
imagemagickimagemagickMatch5.4.3
OR
imagemagickimagemagickMatch5.4.4.5
OR
imagemagickimagemagickMatch5.4.7
OR
imagemagickimagemagickMatch5.4.8
OR
imagemagickimagemagickMatch5.4.8.2_1.1.0
OR
imagemagickimagemagickMatch5.5.3_.2_1.2.0
OR
imagemagickimagemagickMatch5.5.4
OR
imagemagickimagemagickMatch5.5.6
OR
imagemagickimagemagickMatch5.5.6.0_20030409
OR
imagemagickimagemagickMatch5.5.7
OR
imagemagickimagemagickMatch5.5.7.15
OR
imagemagickimagemagickMatch6.0
OR
imagemagickimagemagickMatch6.0.1
OR
imagemagickimagemagickMatch6.0.2
OR
imagemagickimagemagickMatch6.0.2.5
OR
imagemagickimagemagickMatch6.0.3
OR
imagemagickimagemagickMatch6.0.4
OR
imagemagickimagemagickMatch6.0.4.4
OR
imagemagickimagemagickMatch6.0.5
OR
imagemagickimagemagickMatch6.0.6
OR
imagemagickimagemagickMatch6.0.6.2
OR
imagemagickimagemagickMatch6.0.7
OR
imagemagickimagemagickMatch6.0.8
OR
imagemagickimagemagickMatch6.1
OR
imagemagickimagemagickMatch6.1.1
OR
imagemagickimagemagickMatch6.1.2
OR
imagemagickimagemagickMatch6.1.3
OR
imagemagickimagemagickMatch6.1.4
OR
imagemagickimagemagickMatch6.1.5
OR
imagemagickimagemagickMatch6.1.6
OR
imagemagickimagemagickMatch6.1.7
OR
imagemagickimagemagickMatch6.1.8
OR
imagemagickimagemagickMatch6.2
OR
imagemagickimagemagickMatch6.2.0.3
OR
imagemagickimagemagickMatch6.2.0.7
OR
imagemagickimagemagickMatch6.2.1
OR
imagemagickimagemagickMatch6.2.2
OR
imagemagickimagemagickMatch6.2.3
OR
imagemagickimagemagickMatch6.2.3.4
OR
imagemagickimagemagickMatch6.2.4
OR
imagemagickimagemagickMatch6.2.4.3
OR
imagemagickimagemagickMatch6.2.4.5
OR
imagemagickimagemagickMatch6.2.5
OR
imagemagickimagemagickMatch6.2.6
OR
imagemagickimagemagickMatch6.2.7
OR
imagemagickimagemagickMatch6.2.8
OR
imagemagickimagemagickMatch6.2.9
OR
imagemagickimagemagickMatch6.2.9.2
OR
imagemagickimagemagickMatch6.3.1
OR
imagemagickimagemagickMatch6.3.2
OR
imagemagickimagemagickMatch6.3.3_3
OR
imagemagickimagemagickMatch6.3.3_5
OR
imagemagickimagemagickMatch6.3.3_6
OR
imagemagickimagemagickMatch6.3.4
VendorProductVersionCPE
imagemagickimagemagick5.3.8cpe:/a:imagemagick:imagemagick:5.3.8:::
imagemagickimagemagick6.3.2cpe:/a:imagemagick:imagemagick:6.3.2:::
imagemagickimagemagick6.2.3cpe:/a:imagemagick:imagemagick:6.2.3:::
imagemagickimagemagick6.2.4cpe:/a:imagemagick:imagemagick:6.2.4:::
imagemagickimagemagick6.1cpe:/a:imagemagick:imagemagick:6.1:::
imagemagickimagemagick6.2.7cpe:/a:imagemagick:imagemagick:6.2.7:::
imagemagickimagemagick6.2.6cpe:/a:imagemagick:imagemagick:6.2.6:::
imagemagickimagemagick6.0.4cpe:/a:imagemagick:imagemagick:6.0.4:::
imagemagickimagemagick6.3.1cpe:/a:imagemagick:imagemagick:6.3.1:::
imagemagickimagemagick5.4.8.2+1.1.0cpe:/a:imagemagick:imagemagick:5.4.8.2+1.1.0:::
Rows per page:
1-10 of 571

References

Related

seebug 1
prion 1
nvd 1
cvelist 1
debiancve 1
securityvulns 2
ubuntucve 1
openvas 10
nessus 8
freebsd 1
gentoo 1
ubuntu 1
debian 1
osv 1
seebug
seebug
ImageMagick blob.cζ–‡δ»Άε•ε­—θŠ‚ηΌ“ε†²εŒΊζΊ’ε‡ΊζΌζ΄ž
2007-09-25 00:00:00
prion
prion
Out-of-bounds
2007-09-24 22:17:00
nvd
nvd
CVE-2007-4987
2007-09-24 22:17:00
cvelist
cvelist
CVE-2007-4987
2007-09-24 22:00:00
debiancve
debiancve
CVE-2007-4987
2007-09-24 22:17:00
securityvulns
securityvulns
iDefense Security Advisory 09.19.07: Multiple Vendor ImageMagick Off-By-One Vulnerability
2007-09-24 00:00:00
ImageMagic multiple security vulnerabilities
2007-09-24 00:00:00
ubuntucve
ubuntucve
CVE-2007-4987
2007-09-24 00:00:00
openvas
openvas
Ubuntu Update for imagemagick vulnerabilities USN-523-1
2009-03-23 00:00:00
Gentoo Security Advisory GLSA 200710-27 (imagemagick)
2008-09-24 00:00:00
FreeBSD Ports: ImageMagick, ImageMagick-nox11
2008-09-04 00:00:00
nessus
nessus
openSUSE 10 Security Update : ImageMagick (ImageMagick-4543)
2007-11-01 00:00:00
SuSE 10 Security Update : ImageMagick (ZYPP Patch Number 4541)
2007-12-13 00:00:00
FreeBSD : ImageMagick -- multiple vulnerabilities (f5b29ec0-71f9-11dc-8c6a-00304881ac9a)
2007-10-12 00:00:00
freebsd
freebsd
ImageMagick -- multiple vulnerabilities
2007-09-19 00:00:00
gentoo
gentoo
ImageMagick: Multiple vulnerabilities
2007-10-24 00:00:00
ubuntu
ubuntu
ImageMagick vulnerabilities
2007-10-03 00:00:00
debian
debian
[SECURITY] [DSA 1858-1] New imagemagick packages fix several vulnerabilities
2009-08-10 17:05:37
osv
osv
imagemagick - several vulnerabilities
2009-08-10 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.004

Percentile

72.8%

JSON
Related for CVE-2007-4987
seebug1prion1nvd1cvelist1debiancve1securityvulns2ubuntucve1openvas10nessus8freebsd1gentoo1ubuntu1debian1osv1