CVE-2007-1667: Canonical Ubuntu Linux

High severity, CVSS 9.3. EPSS: 4.6% chance of exploitation in the next 30 days.

Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service (crash) or obtain sensitive information via crafted images with large or negative values that trigger a buffer overflow.

Affected products

• Canonical Ubuntu Linux: version 6.06 only; version 6.10 only; version 7.04 only
• Debian Debian Linux: version 3.1 only; version 4.0 only
• X.org LIBX11: up to and including 1.0.2

Published 2007-03-24. Last modified 2026-06-16.