CVE-2007-4985: ImageMagick

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers (1) an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls; or (2) an infinite loop in the ReadXCFImage function, related to ReadBlobMSBLong function calls.

Affected products

• ImageMagick ImageMagick: version 5.3.3 only; version 5.3.8 only; version 5.4.2.3 only; version 5.4.3 only; version 5.4.4.5 only; version 5.4.7 only; …

Published 2007-09-24. Last modified 2026-06-16.