CVE-2007-1667 Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a...
HighCVSS 9.3
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service (crash) or obtain sensitive information via crafted images with large or negative values that trigger a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| x.org libX11 | <= 1.0.2 | No fix listed |
| debian linux | = 3.1 | No fix listed |
| debian linux | = 4.0 | No fix listed |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 6.10 | No fix listed |
| Canonical Ubuntu Linux | = 7.04 | No fix listed |
| debian/graphicsmagick(Debian:12) | < 1.1.7-14 | 1.1.7-14 |
| debian/graphicsmagick(Debian:13) | < 1.1.7-14 | 1.1.7-14 |
| debian/graphicsmagick(Debian:14) | < 1.1.7-14 | 1.1.7-14 |
| debian/imagemagick(Debian:12) | < 7:6.2.4.5.dfsg1-1 | 7:6.2.4.5.dfsg1-1 |
| debian/imagemagick(Debian:13) | < 7:6.2.4.5.dfsg1-1 | 7:6.2.4.5.dfsg1-1 |
| debian/imagemagick(Debian:14) | < 7:6.2.4.5.dfsg1-1 | 7:6.2.4.5.dfsg1-1 |
| debian/libx11(Debian:12) | < 2:1.0.3-7 | 2:1.0.3-7 |
| debian/libx11(Debian:13) | < 2:1.0.3-7 | 2:1.0.3-7 |
| debian/libx11(Debian:14) | < 2:1.0.3-7 | 2:1.0.3-7 |
References
- bugs.debian.org third-party-advisory
- issues.foresightlinux.org broken-link
- APPLE-SA-2009-02-12 mailing-list third-party-advisory vendor-advisory
- [xorg-announce] 20070403 various integer overflow vulnerabilites in xserver, libX11 and libXfont mailing-list third-party-advisory
- RHSA-2007:0125 third-party-advisory vendor-advisory
- 24739 broken-link third-party-advisory
- 24741 broken-link third-party-advisory
- 24745 broken-link third-party-advisory
- 24756 broken-link third-party-advisory
- 24758 broken-link third-party-advisory
- 24765 broken-link third-party-advisory
- 24771 broken-link third-party-advisory
- 24791 broken-link third-party-advisory
- 24953 broken-link third-party-advisory
- 24975 broken-link third-party-advisory
- 25004 broken-link third-party-advisory
- 25072 broken-link third-party-advisory
- 25112 broken-link third-party-advisory
- 25131 broken-link third-party-advisory
- 25305 broken-link third-party-advisory
- 25992 broken-link third-party-advisory
- 26177 broken-link third-party-advisory
- 30161 broken-link third-party-advisory
- 33937 broken-link third-party-advisory
- 36260 third-party-advisory
- GLSA-200705-06 broken-link vendor-advisory
- 102888 broken-link vendor-advisory
- support.apple.com third-party-advisory
- support.avaya.com third-party-advisory
- DSA-1294 third-party-advisory vendor-advisory
- DSA-1858 third-party-advisory vendor-advisory
- GLSA-200805-07 third-party-advisory vendor-advisory
- MDKSA-2007:079 third-party-advisory vendor-advisory
- MDKSA-2007:147 broken-link vendor-advisory
- SUSE-SA:2007:027 broken-link vendor-advisory
- SUSE-SR:2007:008 third-party-advisory vendor-advisory
- [3.9] 021: SECURITY FIX: April 4, 2007 third-party-advisory vendor-advisory
- [4.0] 011: SECURITY FIX: April 4, 2007 third-party-advisory vendor-advisory
- RHSA-2007:0126 third-party-advisory vendor-advisory
- RHSA-2007:0157 third-party-advisory vendor-advisory
- 20070404 rPSA-2007-0065-1 freetype xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs mailing-list third-party-advisory vdb-entry
- 20070405 FLEA-2007-0009-1: xorg-x11 freetype mailing-list third-party-advisory vdb-entry
- 23300 third-party-advisory vdb-entry
- 1017864 third-party-advisory vdb-entry
- USN-453-1 third-party-advisory vendor-advisory
- USN-453-2 third-party-advisory vendor-advisory
- USN-481-1 broken-link vendor-advisory
- ADV-2007-1217 broken-link vdb-entry
- ADV-2007-1531 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory
- issues.rpath.com broken-link
- issues.rpath.com broken-link
- oval:org.mitre.oval:def:1693 broken-link signature vdb-entry
- oval:org.mitre.oval:def:9776 broken-link signature vdb-entry
- Debian Security Tracker CVE-2007-1667 vendor-advisory
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking