CVE-2007-1667: canonical ubuntu_linux Numeric Errors

CVSS: 9.3v2.0HighModified

AliasesRHSA-2007:0157DEBIAN-CVE-2007-1667

Published 24-03-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-1667 is a high (CVSS 9.3) Numeric Errors vulnerability in canonical ubuntu_linux. EPSS estimates a 4.61% chance of exploitation in the next 30 days, higher than 91.5% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

4.61%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 5 · Related 2

DSA-1294-1 DSA-1858-1 DSA-1903-1 RHSA-2007:0125 RHSA-2007:0126 CGA-9Q55-M6Q8-4RJR+1 more

Timeline

24-03-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service (crash) or obtain sensitive information via crafted images with large or negative values that trigger a buffer overflow.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

4.61%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

0.00 pp

From 4.61% on 19-09-2026

19-09-202619-10-2026

EPSS score

4.61%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-189Numeric ErrorsWeaknesses in this category are related to improper calculation or conversion of numbers.

Affected systems

Redhat5 products

libX11< 0:1.0.3-8.0.1.el5
libX11-debuginfo< 0:1.0.3-8.0.1.el5
libX11-devel< 0:1.0.3-8.0.1.el5
xorg-x11-apps< 0:7.1-4.0.1.el5
xorg-x11-apps-debuginfo< 0:7.1-4.0.1.el5

Debian4 products

graphicsmagick< 1.1.7-14
imagemagick< 7:6.2.4.5.dfsg1-1
libx11< 2:1.0.3-7
debian_linuxEOL3.1 | 4.0

Canonical1 product

ubuntu_linuxEOL6.06 | 6.10 | 7.04

X.org1 product

libx11≤ 1.0.2

4 vendors · 11 products

References

63 links

sunsolve.sun.com/search/document.do?assetkey=1-26-102888-1Vendor AdvisoryX Refsource SUNALERTBroken Link
support.avaya.com/elmodocs2/security/ASA-2007-176.htmX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/24745Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/33937Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/24771Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/24756Third Party AdvisoryX Refsource SECUNIABroken Link
www.redhat.com/support/errata/RHSA-2007-0126.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.securityfocus.com/bid/23300VDB EntryX Refsource BIDThird Party Advisory
support.apple.com/kb/HT3438X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/24739Third Party AdvisoryX Refsource SECUNIABroken Link

Show all 63 references

lists.apple.com/archives/security-announce/2009/Feb/msg00000.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
security.gentoo.org/glsa/glsa-200705-06.xmlVendor AdvisoryX Refsource GENTOOBroken Link
secunia.com/advisories/24758Third Party AdvisoryX Refsource SECUNIABroken Link
www.ubuntu.com/usn/usn-453-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.ubuntu.com/usn/usn-481-1Vendor AdvisoryX Refsource UBUNTUBroken Link
issues.rpath.com/browse/RPL-1211X Refsource CONFIRMBroken Link
rhn.redhat.com/errata/RHSA-2007-0125.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/24741Third Party AdvisoryX Refsource SECUNIABroken Link
bugs.debian.org/cgi-bin/bugreport.cgi?bug=414045X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/25992Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/26177Third Party AdvisoryX Refsource SECUNIABroken Link
www.ubuntu.com/usn/usn-453-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.vupen.com/english/advisories/2007/1531VDB EntryX Refsource VUPENThird Party Advisory
lists.freedesktop.org/archives/xorg-announce/2007-April/000286.htmlMailing ListX Refsource MLISTThird Party Advisory
secunia.com/advisories/24791Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/24975Third Party AdvisoryX Refsource SECUNIABroken Link
www.novell.com/linux/security/advisories/2007_27_x.htmlVendor AdvisoryX Refsource SUSEBroken Link
secunia.com/advisories/30161Third Party AdvisoryX Refsource SECUNIABroken Link
www.gentoo.org/security/en/glsa/glsa-200805-07.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
www.debian.org/security/2007/dsa-1294Vendor AdvisoryX Refsource DEBIANThird Party Advisory
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=231684X Refsource CONFIRMIssue TrackingThird Party Advisory
www.securitytracker.com/id?1017864VDB EntryX Refsource SECTRACKThird Party Advisory
secunia.com/advisories/24765Third Party AdvisoryX Refsource SECUNIABroken Link
www.novell.com/linux/security/advisories/2007_8_sr.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
www.securityfocus.com/archive/1/464686/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www.securityfocus.com/archive/1/464816/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
secunia.com/advisories/25131Third Party AdvisoryX Refsource SECUNIABroken Link
www.debian.org/security/2009/dsa-1858Vendor AdvisoryX Refsource DEBIANThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9776VDB EntrySignatureX Refsource OVALBroken Link
secunia.com/advisories/24953Third Party AdvisoryX Refsource SECUNIABroken Link
www.vupen.com/english/advisories/2007/1217VDB EntryX Refsource VUPENBroken Link
www.openbsd.org/errata40.htmlVendor AdvisoryX Refsource OPENBSDThird Party Advisory
issues.rpath.com/browse/RPL-1213X Refsource CONFIRMBroken Link
secunia.com/advisories/25004Third Party AdvisoryX Refsource SECUNIABroken Link
www.mandriva.com/security/advisories?name=MDKSA-2007:147Vendor AdvisoryX Refsource MANDRIVABroken Link
secunia.com/advisories/25305Third Party AdvisoryX Refsource SECUNIABroken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1693VDB EntrySignatureX Refsource OVALBroken Link
secunia.com/advisories/25072Third Party AdvisoryX Refsource SECUNIABroken Link
www.openbsd.org/errata39.htmlVendor AdvisoryX Refsource OPENBSDThird Party Advisory
secunia.com/advisories/25112Third Party AdvisoryX Refsource SECUNIABroken Link
issues.foresightlinux.org/browse/FL-223X Refsource CONFIRMBroken Link
secunia.com/advisories/36260Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2007-0157.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.mandriva.com/security/advisories?name=MDKSA-2007:079Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
access.redhat.com/errata/RHSA-2007:0157Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=231694REPORT
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0157.jsonAdvisory
access.redhat.com/security/cve/CVE-2007-1667REPORT
bugzilla.redhat.com/show_bug.cgi?id=231684REPORT
www.cve.org/CVERecord?id=CVE-2007-1667Advisory
nvd.nist.gov/vuln/detail/CVE-2007-1667Advisory
security-tracker.debian.org/tracker/CVE-2007-1667Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities