This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2007-1667 →
DEBIAN-CVE-2007-1667
Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagic...
Original description
The description as published by the source.
Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service (crash) or obtain sensitive information via crafted images with large or negative values that trigger a buffer overflow.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
graphicsmagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.7-14"}]}]
Debian:13
graphicsmagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.7-14"}]}]
Debian:14
graphicsmagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.7-14"}]}]
Debian:12
imagemagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:6.2.4.5.dfsg1-1"}]}]
Debian:13
imagemagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:6.2.4.5.dfsg1-1"}]}]
Debian:14
imagemagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:6.2.4.5.dfsg1-1"}]}]
Debian:12
libx11
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.3-7"}]}]
Debian:13
libx11
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.3-7"}]}]
Debian:14
libx11
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.0.3-7"}]}]
References
- advisory security-tracker.debian.org