NetSight
IP …
medium4.3

CVE-2007-4985

ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers (1) an infinite loop in the R…

Impact

ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers (1) an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls; or (2) an infinite loop in the ReadXCFImage function, related to ReadBlobMSBLong function calls.

Affected products

VendorProductAffected versions
ImagemagickImagemagick
Versions 5.3.3, 5.3.8, 5.4.2.3, 5.4.3, 5.4.4.5, 5.4.7

Weakness classification

CWE-399

References