Sign extension error in the ReadDIBImage function in... · CVE-2007-4988 · GitHub Advisory Database · GitHub

Sign extension error in the ReadDIBImage function in...

Moderate severity Unreviewed Published May 1, 2022 to the GitHub Advisory Database • Updated Feb 10, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.

References

Published by the National Vulnerability Database

Sep 24, 2007

Published to the GitHub Advisory Database May 1, 2022

Last updated Feb 10, 2024

Weaknesses

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. Learn more on MITRE.

CWE-681

Incorrect Conversion between Numeric Types

When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur. Learn more on MITRE.