CVE-2007-1071

Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image that triggers the overflow during decompression. NOTE: this is a different issue than CVE-2006-3502 and CVE-2006-3503.

CVSS v2.0

7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS

18.24% chance of exploitation in the next 30 days, 97th percentile

Published

2007-02-22

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/29620

References

• CVE Record
• NVD entry

Related

• CVE-2007-1070
• CVE-2007-1074
• CVE-2007-1061
• CVE-2007-1075
• CVE-2007-1060
• CVE-2007-1076