cve/2007/CVE-2007-4988.md

CVE-2007-4988

Description

Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.

POC

Reference

• http://www.imagemagick.org/script/changelog.php
• http://www.imagemagick.org/script/changelog.php
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9656
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9656

Github

No PoCs found on GitHub currently.