CVE-2007-1797 - CVE House
Back to Database
Status published Medium CVE-2007-1797

Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers...

Vulnerability Description

Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which results in a heap-based overflow in the ReadXWDImage function, different issues than CVE-2007-1667.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-1797

Credits & Attribution

No credits recorded in the NVD database.

References

More from imagemagick

View All →
CVE-2022-48541
A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote...
High 7.1
CVE-2022-44268
ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses...
Unknown 0
CVE-2022-44267
ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it...
Unknown 0
CVE-2022-28463
ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow....
High 7.8
CVE-2021-40211
An issue was discovered with ImageMagick 7.1.0-4 via Division by...
High 7.5

Affected Vendor

imagemagick

View all reports →

Affected Software

imagemagick
Vulnerable Versions:
6.3.0.0, 6.3.0.1, 6.3.0.2, 6.3.0.3, 6.3.0.4, 6.3.0.5, 6.3.0.7, 6.3.0.8, 6.3.1.0, 6.3.1.1, 6.3.1.2., 6.3.1.3, 6.3.1.4, 6.3.1.5, 6.3.1.6, 6.3.1.7, 6.3.2.0, 6.3.2.1, 6.3.2.2, 6.3.2.3, 6.3.2.4, 6.3.2.5, 6.3.2.6, 6.3.2.7, 6.3.2.8, 6.3.3.0, 6.3.3.1, 6.3.3.2, 6.3.3.3, 6.3.3.4

Timeline

Official Publish: April 2nd, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.