CVEs-PoC/2007/CVE-2007-4985.md

CVE-2007-4985

Description

ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers (1) an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls; or (2) an infinite loop in the ReadXCFImage function, related to ReadBlobMSBLong function calls.

POC

Reference

• http://www.imagemagick.org/script/changelog.php
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10869

Github

No PoCs found on GitHub currently.