CVE-2007-2459: Tony Cook Imager

High severity, CVSS 7.8. EPSS: 4.9% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 through 0.56 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted 8-bit/pixel compressed BMP files.

Affected products

• Tony Cook Imager: version 0.44 only; version 0.44_1 only; version 0.45 only; version 0.45_2 only; version 0.46 only; version 0.47 only; …

Published 2007-05-02. Last modified 2026-06-16.