CVE-2007-2459

Published: May 2, 2007Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 through 0.56 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted 8-bit/pixel compressed BMP files.

Affected (15)

Products: Tony Cook: Imager

1 product

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Tony Cook Imager	Version 0.44
Tony Cook Imager	Version 0.44_1
Tony Cook Imager	Version 0.45
Tony Cook Imager	Version 0.45_2
Tony Cook Imager	Version 0.46
Tony Cook Imager	Version 0.47
Tony Cook Imager	Version 0.48
Tony Cook Imager	Version 0.49
Tony Cook Imager	Version 0.50
Tony Cook Imager	Version 0.51
Tony Cook Imager	Version 0.52
Tony Cook Imager	Version 0.53
Tony Cook Imager	Version 0.54
Tony Cook Imager	Version 0.55
Tony Cook Imager	Version 0.56

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (22)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=421582

Source: cve@mitre.org

http://imager.perl.org/a/65.html

Source: cve@mitre.org

http://osvdb.org/35470

Source: cve@mitre.org

http://osvdb.org/39846

Source: cve@mitre.org

http://rt.cpan.org/Public/Bug/Display.html?id=26811

Source: cve@mitre.org

http://secunia.com/advisories/25038

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28868

Source: cve@mitre.org

Vendor Advisory

http://www.debian.org/security/2008/dsa-1498

Source: cve@mitre.org

http://www.securityfocus.com/bid/23711

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1587

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34010

Source: cve@mitre.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=421582

Source: af854a3a-2127-422b-91ae-364da2661108

http://imager.perl.org/a/65.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/35470

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/39846

Source: af854a3a-2127-422b-91ae-364da2661108

http://rt.cpan.org/Public/Bug/Display.html?id=26811

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/25038

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/28868

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.debian.org/security/2008/dsa-1498

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/23711

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/1587

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/34010

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.