Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2007-1667 →
DEBIAN-CVE-2007-1667
Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagic...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service (crash) or obtain sensitive information via crafted images with large or negative values that trigger a buffer overflow.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
graphicsmagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.7-14"}]}]
Debian:13
graphicsmagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.7-14"}]}]
Debian:14
graphicsmagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.7-14"}]}]
Debian:12
imagemagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:6.2.4.5.dfsg1-1"}]}]
Debian:13
imagemagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:6.2.4.5.dfsg1-1"}]}]
Debian:14
imagemagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:6.2.4.5.dfsg1-1"}]}]
Debian:12
libx11
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.3-7"}]}]
Debian:13
libx11
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.3-7"}]}]
Debian:14
libx11
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.3-7"}]}]
Références
- advisory security-tracker.debian.org