CVE-2007-4988

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

3.09% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 87.6% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-16.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2007-09-24 22:00Z19 YR AGO

Last updated

2024-08-07 15:17Z2 YR AGO

Reserved

2007-09-19

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-681Incorrect Conversion between Numeric TypesBase
• CWE-190Integer Overflow or WraparoundBase

Data version

5.1

Document digest

0db9a3374706448d6f685dec041022e94cfe4c7f86eb5f19e91e72eb11ef7fd2

• secunia.com27364http://secunia.com/advisories/27364third-party-advisoryx_refsource_SECUNIA
• www.redhat.comRHSA-2008:0145http://www.redhat.com/support/errata/RHSA-2008-0145.htmlvendor-advisoryx_refsource_REDHAT
• www.securityfocus.com20071112 FLEA-2007-0066-1 ImageMagickhttp://www.securityfocus.com/archive/1/483572/100/0/threadedmailing-listx_refsource_BUGTRAQ
• www.ubuntu.comUSN-523-1http://www.ubuntu.com/usn/usn-523-1vendor-advisoryx_refsource_UBUNTU
• secunia.com27309http://secunia.com/advisories/27309third-party-advisoryx_refsource_SECUNIA
• secunia.com29786http://secunia.com/advisories/29786third-party-advisoryx_refsource_SECUNIA
• www.securityfocus.com25765http://www.securityfocus.com/bid/25765vdb-entryx_refsource_BID
• www.imagemagick.orghttp://www.imagemagick.org/script/changelog.phpx_refsource_CONFIRM
• www.vupen.comADV-2007-3245http://www.vupen.com/english/advisories/2007/3245vdb-entryx_refsource_VUPEN
• labs.idefense.com20070919 Multiple Vendor ImageMagick Sign Extension Vulnerabilityhttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=597third-party-advisoryx_refsource_IDEFENSE
• security.gentoo.orgGLSA-200710-27http://security.gentoo.org/glsa/glsa-200710-27.xmlvendor-advisoryx_refsource_GENTOO
• www.securitytracker.com1018729http://www.securitytracker.com/id?1018729vdb-entryx_refsource_SECTRACK
• secunia.com27048http://secunia.com/advisories/27048third-party-advisoryx_refsource_SECUNIA
• exchange.xforce.ibmcloud.comimagemagick-readdibimage-bo(36737)https://exchange.xforce.ibmcloud.com/vulnerabilities/36737vdb-entryx_refsource_XF
• secunia.com28721http://secunia.com/advisories/28721third-party-advisoryx_refsource_SECUNIA
• secunia.com27439http://secunia.com/advisories/27439third-party-advisoryx_refsource_SECUNIA
• issues.rpath.comhttps://issues.rpath.com/browse/RPL-1743x_refsource_CONFIRM
• www.debian.orgDSA-1858http://www.debian.org/security/2009/dsa-1858vendor-advisoryx_refsource_DEBIAN
• studio.imagemagick.org[Magick-announce] 20070917 ImageMagick 6.3.5-9, important security updateshttp://studio.imagemagick.org/pipermail/magick-announce/2007-September/000037.htmlmailing-listx_refsource_MLIST
• secunia.com26926http://secunia.com/advisories/26926third-party-advisoryx_refsource_SECUNIA
• www.mandriva.comMDVSA-2008:035http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:035vendor-advisoryx_refsource_MANDRIVA
• oval.cisecurity.orgoval:org.mitre.oval:def:9656https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9656vdb-entrysignaturex_refsource_OVAL
• bugs.gentoo.orghttp://bugs.gentoo.org/show_bug.cgi?id=186030x_refsource_CONFIRM
• www.novell.comSUSE-SR:2007:023http://www.novell.com/linux/security/advisories/2007_23_sr.htmlvendor-advisoryx_refsource_SUSE
• secunia.com36260http://secunia.com/advisories/36260third-party-advisoryx_refsource_SECUNIA