CVE-2007-4988 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2007-4988 Interim 1 13 2025-11-05T06:18:59Z current 2021-05-30T12:40:10Z 2025-11-05T06:18:59Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2007-4988 Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JZR34XYAQISXTYHY5S7YBJOREMK2TCA3/#JZR34XYAQISXTYHY5S7YBJOREMK2TCA3 E-Mail link for SUSE-SR:2007:023 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Software Development Kit 11 SP4 openSUSE Tumbleweed GraphicsMagick-1.2.5-4.33.1 GraphicsMagick-1.3.36-1.7 GraphicsMagick-devel-1.3.36-1.7 ImageMagick-6.4.3.6-7.30.1 ImageMagick-7.1.2.0-160000.3.2 ImageMagick-config-7-SUSE-7.1.2.0-160000.3.2 ImageMagick-devel-6.4.3.6-7.30.1 ImageMagick-devel-7.1.2.0-160000.3.2 ImageMagick-doc-7.1.2.0-160000.3.2 ImageMagick-extra-7.1.2.0-160000.3.2 libGraphicsMagick++-Q16-12-1.3.36-1.7 libGraphicsMagick++-devel-1.3.36-1.7 libGraphicsMagick-Q16-3-1.3.36-1.7 libGraphicsMagick2-1.2.5-4.33.1 libGraphicsMagick3-config-1.3.36-1.7 libGraphicsMagickWand-Q16-2-1.3.36-1.7 libMagick++-7_Q16HDRI5-7.1.2.0-160000.3.2 libMagick++-devel-6.4.3.6-7.30.1 libMagick++-devel-7.1.2.0-160000.3.2 libMagick++1-6.4.3.6-7.30.1 libMagickCore-7_Q16HDRI10-7.1.2.0-160000.3.2 libMagickCore1-32bit-6.4.3.6-7.20.1 libMagickCore1-32bit-6.4.3.6-7.22.1 libMagickCore1-32bit-6.4.3.6-7.26.1 libMagickCore1-32bit-6.4.3.6-7.30.1 libMagickCore1-6.4.3.6-7.20.1 libMagickCore1-6.4.3.6-7.22.1 libMagickCore1-6.4.3.6-7.26.1 libMagickCore1-6.4.3.6-7.30.1 libMagickWand-7_Q16HDRI10-7.1.2.0-160000.3.2 libMagickWand1-32bit-6.4.3.6-7.30.1 libMagickWand1-6.4.3.6-7.30.1 perl-GraphicsMagick-1.2.5-4.33.1 perl-GraphicsMagick-1.3.36-1.7 perl-PerlMagick-6.4.3.6-7.30.1 perl-PerlMagick-7.1.2.0-160000.3.2 libMagickCore1-6.4.3.6-7.20.1 as a component of SUSE Linux Enterprise Server 11 SP1 libMagickCore1-32bit-6.4.3.6-7.20.1 as a component of SUSE Linux Enterprise Server 11 SP1 libMagickCore1-6.4.3.6-7.22.1 as a component of SUSE Linux Enterprise Server 11 SP2 libMagickCore1-32bit-6.4.3.6-7.22.1 as a component of SUSE Linux Enterprise Server 11 SP2 libMagickCore1-6.4.3.6-7.26.1 as a component of SUSE Linux Enterprise Server 11 SP3 libMagickCore1-32bit-6.4.3.6-7.26.1 as a component of SUSE Linux Enterprise Server 11 SP3 libMagickCore1-6.4.3.6-7.30.1 as a component of SUSE Linux Enterprise Server 11 SP4 libMagickCore1-32bit-6.4.3.6-7.30.1 as a component of SUSE Linux Enterprise Server 11 SP4 ImageMagick-7.1.2.0-160000.3.2 as a component of SUSE Linux Enterprise Server 16.0 ImageMagick-config-7-SUSE-7.1.2.0-160000.3.2 as a component of SUSE Linux Enterprise Server 16.0 ImageMagick-devel-7.1.2.0-160000.3.2 as a component of SUSE Linux Enterprise Server 16.0 ImageMagick-doc-7.1.2.0-160000.3.2 as a component of SUSE Linux Enterprise Server 16.0 ImageMagick-extra-7.1.2.0-160000.3.2 as a component of SUSE Linux Enterprise Server 16.0 libMagick++-7_Q16HDRI5-7.1.2.0-160000.3.2 as a component of SUSE Linux Enterprise Server 16.0 libMagick++-devel-7.1.2.0-160000.3.2 as a component of SUSE Linux Enterprise Server 16.0 libMagickCore-7_Q16HDRI10-7.1.2.0-160000.3.2 as a component of SUSE Linux Enterprise Server 16.0 libMagickWand-7_Q16HDRI10-7.1.2.0-160000.3.2 as a component of SUSE Linux Enterprise Server 16.0 perl-PerlMagick-7.1.2.0-160000.3.2 as a component of SUSE Linux Enterprise Server 16.0 GraphicsMagick-1.2.5-4.33.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ImageMagick-6.4.3.6-7.30.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ImageMagick-devel-6.4.3.6-7.30.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libGraphicsMagick2-1.2.5-4.33.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libMagick++-devel-6.4.3.6-7.30.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libMagick++1-6.4.3.6-7.30.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libMagickWand1-6.4.3.6-7.30.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libMagickWand1-32bit-6.4.3.6-7.30.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 perl-GraphicsMagick-1.2.5-4.33.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 perl-PerlMagick-6.4.3.6-7.30.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 GraphicsMagick-1.3.36-1.7 as a component of openSUSE Tumbleweed GraphicsMagick-devel-1.3.36-1.7 as a component of openSUSE Tumbleweed libGraphicsMagick++-Q16-12-1.3.36-1.7 as a component of openSUSE Tumbleweed libGraphicsMagick++-devel-1.3.36-1.7 as a component of openSUSE Tumbleweed libGraphicsMagick-Q16-3-1.3.36-1.7 as a component of openSUSE Tumbleweed libGraphicsMagick3-config-1.3.36-1.7 as a component of openSUSE Tumbleweed libGraphicsMagickWand-Q16-2-1.3.36-1.7 as a component of openSUSE Tumbleweed perl-GraphicsMagick-1.3.36-1.7 as a component of openSUSE Tumbleweed Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow. CVE-2007-4988 SUSE Linux Enterprise Server 11 SP1:libMagickCore1-6.4.3.6-7.20.1 SUSE Linux Enterprise Server 11 SP1:libMagickCore1-32bit-6.4.3.6-7.20.1 SUSE Linux Enterprise Server 11 SP2:libMagickCore1-6.4.3.6-7.22.1 SUSE Linux Enterprise Server 11 SP2:libMagickCore1-32bit-6.4.3.6-7.22.1 SUSE Linux Enterprise Server 11 SP3:libMagickCore1-6.4.3.6-7.26.1 SUSE Linux Enterprise Server 11 SP3:libMagickCore1-32bit-6.4.3.6-7.26.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-6.4.3.6-7.30.1 SUSE Linux Enterprise Server 11 SP4:libMagickCore1-32bit-6.4.3.6-7.30.1 SUSE Linux Enterprise Server 16.0:ImageMagick-7.1.2.0-160000.3.2 SUSE Linux Enterprise Server 16.0:ImageMagick-config-7-SUSE-7.1.2.0-160000.3.2 SUSE Linux Enterprise Server 16.0:ImageMagick-devel-7.1.2.0-160000.3.2 SUSE Linux Enterprise Server 16.0:ImageMagick-doc-7.1.2.0-160000.3.2 SUSE Linux Enterprise Server 16.0:ImageMagick-extra-7.1.2.0-160000.3.2 SUSE Linux Enterprise Server 16.0:libMagick++-7_Q16HDRI5-7.1.2.0-160000.3.2 SUSE Linux Enterprise Server 16.0:libMagick++-devel-7.1.2.0-160000.3.2 SUSE Linux Enterprise Server 16.0:libMagickCore-7_Q16HDRI10-7.1.2.0-160000.3.2 SUSE Linux Enterprise Server 16.0:libMagickWand-7_Q16HDRI10-7.1.2.0-160000.3.2 SUSE Linux Enterprise Server 16.0:perl-PerlMagick-7.1.2.0-160000.3.2 SUSE Linux Enterprise Software Development Kit 11 SP4:GraphicsMagick-1.2.5-4.33.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-6.4.3.6-7.30.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ImageMagick-devel-6.4.3.6-7.30.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libGraphicsMagick2-1.2.5-4.33.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++-devel-6.4.3.6-7.30.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagick++1-6.4.3.6-7.30.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-6.4.3.6-7.30.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libMagickWand1-32bit-6.4.3.6-7.30.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-GraphicsMagick-1.2.5-4.33.1 SUSE Linux Enterprise Software Development Kit 11 SP4:perl-PerlMagick-6.4.3.6-7.30.1 openSUSE Tumbleweed:GraphicsMagick-1.3.36-1.7 openSUSE Tumbleweed:GraphicsMagick-devel-1.3.36-1.7 openSUSE Tumbleweed:libGraphicsMagick++-Q16-12-1.3.36-1.7 openSUSE Tumbleweed:libGraphicsMagick++-devel-1.3.36-1.7 openSUSE Tumbleweed:libGraphicsMagick-Q16-3-1.3.36-1.7 openSUSE Tumbleweed:libGraphicsMagick3-config-1.3.36-1.7 openSUSE Tumbleweed:libGraphicsMagickWand-Q16-2-1.3.36-1.7 openSUSE Tumbleweed:perl-GraphicsMagick-1.3.36-1.7 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H