CVE-2007-0770: Buffer Overflow

Published Feb 12, 2007

Updated

Buffer overflow in GraphicsMagick and ImageMagick allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c. NOTE: this issue is due to an incomplete patch for CVE-2006-5456.

Affected Software

2 affected components

GraphicsMagick Graphicsmagick

ImageMagick ImageMagick=6.3.3.4

Event History

Feb 12, 2007

CVE Published

08:28 PM

Feb 13, 2007

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0770?

CVE-2007-0770 is considered to have a high severity due to its potential for remote code execution and denial of service.

How do I fix CVE-2007-0770?

To fix CVE-2007-0770, update GraphicsMagick or ImageMagick to the latest version that addresses this vulnerability.

What systems are affected by CVE-2007-0770?

CVE-2007-0770 affects versions of GraphicsMagick and ImageMagick, specifically the version 6.3.3.4 of ImageMagick.

What type of attack does CVE-2007-0770 facilitate?

CVE-2007-0770 can facilitate user-assisted remote attacks that can lead to denial of service and arbitrary code execution.

What is the cause of CVE-2007-0770?

CVE-2007-0770 is caused by a buffer overflow vulnerability in the ReadPALMImage function used in handling PALM images.