CVE-2007-0770 Buffer overflow in GraphicsMagick and ImageMagick allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a PALM image that is not properly handled b...
HighCVSS 9.3
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in GraphicsMagick and ImageMagick allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c. NOTE: this issue is due to an incomplete patch for CVE-2006-5456.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| graphicsmagick | All versions | No fix listed |
| ImageMagick | = 6.3.3.4 | No fix listed |
| debian/graphicsmagick(Debian:12) | < 1.1.7-12 | 1.1.7-12 |
| debian/graphicsmagick(Debian:13) | < 1.1.7-12 | 1.1.7-12 |
| debian/graphicsmagick(Debian:14) | < 1.1.7-12 | 1.1.7-12 |
| debian/imagemagick(Debian:12) | < 7:6.2.4.5.dfsg1-0.14 | 7:6.2.4.5.dfsg1-0.14 |
| debian/imagemagick(Debian:13) | < 7:6.2.4.5.dfsg1-0.14 | 7:6.2.4.5.dfsg1-0.14 |
| debian/imagemagick(Debian:14) | < 7:6.2.4.5.dfsg1-0.14 | 7:6.2.4.5.dfsg1-0.14 |
References
- 24167 third-party-advisory
- 24196 third-party-advisory
- DSA-1260 vendor-advisory
- MDKSA-2007:041 vendor-advisory
- SUSE-SR:2007:003 vendor-advisory
- 31911 vdb-entry
- 20070208 rPSA-2007-0029-1 ImageMagick mailing-list
- USN-422-1 vendor-advisory
- issues.rpath.com
- Debian Security Tracker CVE-2007-0770 vendor-advisory
- bugs.debian.org issue-tracking