Executive Summary

Informations
Name CVE-2007-2459 First vendor Publication 2007-05-02
Vendor Cve Last vendor Modification 2017-07-29

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:C)
Cvss Base Score 7.8 Attack Range Network
Cvss Impact Score 6.9 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 through 0.56 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted 8-bit/pixel compressed BMP files.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2459

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-119 Failure to Constrain Operations within the Bounds of a Memory Buffer

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:20377
 
Oval ID: oval:org.mitre.oval:def:20377
Title: DSA-1498-1 libimager-perl - buffer overflow
Description: It was discovered that libimager-perl, a Perl extension for generating 24-bit images, did not correctly handle 8-bit compressed images, which could allow the execution of arbitrary code.
Family: unix Class: patch
Reference(s): DSA-1498-1
CVE-2007-2459
 Version: 5
Platform(s): Debian GNU/Linux 4.0
 Product(s): libimager-perl
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:7933
 
Oval ID: oval:org.mitre.oval:def:7933
Title: DSA-1498 libimager-perl -- buffer overflow
Description: It was discovered that libimager-perl, a Perl extension for generating 24-bit images, did not correctly handle 8-bit compressed images, which could allow the execution of arbitrary code.
Family: unix Class: patch
Reference(s): DSA-1498
CVE-2007-2459
 Version: 3
Platform(s): Debian GNU/Linux 4.0
 Product(s): libimager-perl
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 15

OpenVAS Exploits

Date Description
2008-02-28 Name : Debian Security Advisory DSA 1498-1 (libimager-perl)
File : nvt/deb_1498_1.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
39846 Imager bmp.c read_4bit_bmp Function 4-bit/pixel BMP File Parsing Overflow

Nessus® Vulnerability Scanner

Date Description
2008-02-20 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-1498.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/23711
CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=421582
http://imager.perl.org/a/65.html
http://rt.cpan.org/Public/Bug/Display.html?id=26811
DEBIAN http://www.debian.org/security/2008/dsa-1498
OSVDB http://osvdb.org/35470
http://osvdb.org/39846
SECUNIA http://secunia.com/advisories/25038
http://secunia.com/advisories/28868
VUPEN http://www.vupen.com/english/advisories/2007/1587
XF https://exchange.xforce.ibmcloud.com/vulnerabilities/34010

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
Date Informations
2021-05-04 12:05:44
  • Multiple Updates
2021-04-22 01:06:18
  • Multiple Updates
2020-05-23 00:19:42
  • Multiple Updates
2017-07-29 12:02:12
  • Multiple Updates
2016-06-28 16:26:34
  • Multiple Updates
2016-04-26 16:05:23
  • Multiple Updates
2014-02-17 10:40:06
  • Multiple Updates
2013-05-11 10:25:05
  • Multiple Updates