CVE-2007-1071: Integer Overflow

Published Feb 22, 2007

Updated

Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image that triggers the overflow during decompression. NOTE: this is a different issue than CVE-2006-3502 and CVE-2006-3503.

Affected Software

2 affected components

Apple Mac OS X Server=10.4.8

Apple iOS and macOS=10.4.8

Event History

Feb 22, 2007

CVE Published

10:28 PM

Feb 23, 2007

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1071?

CVE-2007-1071 is considered a high severity vulnerability due to its potential to cause denial of service and execute arbitrary code.

How do I fix CVE-2007-1071?

To fix CVE-2007-1071, it is recommended to update to a fixed version of Apple Mac OS X or ensure that relevant security patches are applied.

What systems are affected by CVE-2007-1071?

CVE-2007-1071 affects Apple Mac OS X and OS X Server specifically at version 10.4.8.

What type of vulnerability is CVE-2007-1071?

CVE-2007-1071 is an integer overflow vulnerability that occurs in the gifGetBandProc function during GIF image decompression.

Can CVE-2007-1071 be exploited remotely?

Yes, CVE-2007-1071 can be exploited remotely through crafted GIF images sent to the affected systems.