Description
Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service (crash) or obtain sensitive information via crafted images with large or negative values that trigger a buffer overflow.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1294-1 | New xfree86 packages fix several vulnerabilities |
Debian DSA |
DSA-1858-1 | New imagemagick packages fix several vulnerabilities |
Debian DSA |
DSA-1903-1 | New graphicsmagick packages fix several vulnerabilities |
EUVD |
EUVD-2007-1661 | Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service (crash) or obtain sensitive information via crafted images with large or negative values that trigger a buffer overflow. |
Ubuntu USN |
USN-453-1 | X.org vulnerability |
Ubuntu USN |
USN-481-1 | ImageMagick vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-07T13:06:25.712Z
Reserved: 2007-03-24T00:00:00.000Z
Link: CVE-2007-1667
No data.
Status : Modified
Published: 2007-03-24T21:19:00.000
Modified: 2026-04-23T00:35:47.467
Link: CVE-2007-1667
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD
Ubuntu USN