CVE-2007-2459
Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45...
Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 through 0.56 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted 8-bit/pixel compressed BMP files.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 through 0.56 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted 8-bit/pixel compressed BMP files.
- Record
CVE-2007-2459- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 through 0.56 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted 8-bit/pixel compressed BMP files.
- Record
CVE-2007-2459- Updated
- 2026-11-02
EUVDEUVD-2007-2452 No score
Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 through 0.56 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted 8-bit/pixel compressed BMP files.
- Record
EUVD-2007-2452- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v92m-h6q5-w9gg No score
Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45...
Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 through 0.56 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted 8-bit/pixel compressed BMP files.
- Record
GHSA-v92m-h6q5-w9gg- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 through 0.56 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted 8-bit/pixel compressed BMP files.
- Record
CVE-2007-2459- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-2459 No score
Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 through 0.56 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted 8-bit/pixel compressed BMP files.
- Record
DEBIAN-CVE-2007-2459- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libimager-perlDebian:12 |
before 0.58-1 | 0.58-1 |
libimager-perlDebian:13 |
before 0.58-1 | 0.58-1 |
libimager-perlDebian:14 |
before 0.58-1 | 0.58-1 |
libimager-perlDebian:4.0 |
before 0.50-1etch1, plus listed versions 0.50-1 |
0.50-1etch1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2459 is a high vulnerability (CVSS 7.8) in Tony Cook Imager, published May 2, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.93%, the 92nd percentile. Fixed in libimager-perl 0.58-1.
References
osvdb.org/35470
bugs.debian.org/cgi-bin/bugreport.cgi?bug=421582
debian.org/security/2008/dsa-1498
securityfocus.com/bid/23711
imager.perl.org/a/65.html
Show 8 moreShow less
secunia.com/advisories/25038
rt.cpan.org/Public/Bug/Display.html?id=26811
vupen.com/english/advisories/2007/1587
exchange.xforce.ibmcloud.com/vulnerabilities/34010
nvd.nist.gov/vuln/detail/CVE-2007-2459
github.com/advisories/GHSA-v92m-h6q5-w9gg
security-tracker.debian.org/tracker/CVE-2007-2459