Servers and applications
CVE-2007-4986 Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted (1) .dcm, (2) .dib, (3) .xbm, (4) .xcf, or (5) .xwd image file, which triggers a heap-based buffer overflow.
Severity Medium 6.8
Published 24 Sept 2007
Last changed 16 Jun 2026
Added to UpHeron 1 Nov 2026 Exploit chance 3.3% in the next 30 daysHigher than 88% of CVEs. EPSS by FIRST , 12 Nov 2026
Attack Over the network · No login needed
Attacker can Read some data · Change some data · Slow it down
CVSS vector AV:N/AC:M/Au:N/C:P/I:P/A:P
Sources NVD Affected software Software Affected versions ImageMagickServers and applications · cpe:a:imagemagick:imagemagick Version 6.3.4 Version 6.3.3_6 Version 6.3.3_5 Version 6.3.3_3 All 57 release lines Version 5.3.3 Version 5.3.8 Version 5.4.2.3 Version 5.4.3 Version 5.4.4.5 Version 5.4.7 Version 5.4.8 Version 5.4.8.2_1.1.0 Version 5.5.3_.2_1.2.0 Version 5.5.4 Version 5.5.6 Version 5.5.6.0_20030409 Version 5.5.7 Version 5.5.7.15 Version 6.0 Version 6.0.1 Version 6.0.2 Version 6.0.2.5 Version 6.0.3 Version 6.0.4 Version 6.0.4.4 Version 6.0.5 Version 6.0.6 Version 6.0.6.2 Version 6.0.7 Version 6.0.8 Version 6.1 Version 6.1.1 Version 6.1.2 Version 6.1.3 Version 6.1.4 Version 6.1.5 Version 6.1.6 Version 6.1.7 Version 6.1.8 Version 6.2 Version 6.2.0.3 Version 6.2.0.7 Version 6.2.1 Version 6.2.2 Version 6.2.3 Version 6.2.3.4 Version 6.2.4 Version 6.2.4.3 Version 6.2.4.5 Version 6.2.5 Version 6.2.6 Version 6.2.7 Version 6.2.8 Version 6.2.9 Version 6.2.9.2 Version 6.3.1 Version 6.3.2 Version 6.3.3_3 Version 6.3.3_5 Version 6.3.3_6 Version 6.3.4
References NVD https://nvd.nist.gov/vuln/detail/CVE-2007-4986 CVE.org https://www.cve.org/CVERecord?id=CVE-2007-4986