CVE-2007-1071

Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image that triggers the overflow during decompression. NOTE: this is a different issue than CVE-2006-3502 and CVE-2006-3503.

Affected products

Macos X, Macos X Server

Apple Mac Os X

= 10.4.8

Apple Mac Os X Server

= 10.4.8

Fix

Available

CVSS 2.0

7.8 HIGH

EPSS

18.2% (97th percentile)

NVD status

Modified

Published

2007-02-22