CVE-2007-4988: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 3.1% chance of exploitation in the next 30 days.

Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.

Affected products

• Canonical Ubuntu Linux: version 6.06 only; version 6.10 only; version 7.04 only
• ImageMagick ImageMagick: before 6.3.5-9 (fixed in 6.3.5-9)

Published 2007-09-24. Last modified 2026-06-16.