Login Request a demo
Unscored severity · published Feb 12, 2007
CVE-2007-0770
Buffer overflow in GraphicsMagick and ImageMagick allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a PALM image that is…
–
CVSS
5.4%
EPSS
No
On KEV
Description
Buffer overflow in GraphicsMagick and ImageMagick allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c. NOTE: this issue is due to an incomplete patch for CVE-2006-5456.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.4% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GR
Graphicsmagick · Graphicsmagick
All versions, or not specified · source: NVD
IM
Imagemagick · Imagemagick
6.3.3.4 · source: NVD
Affected product
GR
Graphicsmagick
Graphicsmagick
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0770
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0770
secunia.com
http://secunia.com/advisories/24167
secunia.com
http://secunia.com/advisories/24196
www.debian.org
http://www.debian.org/security/2007/dsa-1260
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDKSA-2007:041
www.novell.com
http://www.novell.com/linux/security/advisories/2007_3_sr.html
www.osvdb.org
http://www.osvdb.org/31911
More from Graphicsmagick
9.8
CVE-2025-27796
ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob
9.8
CVE-2020-10938
GraphicsMagick before 1.3.35 has an integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c
9.8
CVE-2019-19951
In GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function ImportRLEPixels of coders/miff.c
9.8
CVE-2019-19950
In GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and ThrowLoggedException of magick/error.c
9.8
CVE-2019-11005
In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a stack-based buffer overflow in the function SVGStartElement of coders/svg.c, which allows remote attackers to cause a denial…