CVE-2007-1797: ImageMagick

Medium severity, CVSS 6.8. EPSS: 3.5% chance of exploitation in the next 30 days.

Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which results in a heap-based overflow in the ReadXWDImage function, different issues than CVE-2007-1667.

Affected products

• ImageMagick ImageMagick: version 6.3.0.0 only; version 6.3.0.1 only; version 6.3.0.2 only; version 6.3.0.3 only; version 6.3.0.4 only; version 6.3.0.5 only; …

Published 2007-04-02. Last modified 2026-06-16.