CVE-2007-4988

CVE-2007-4988 is a critical vulnerability in ImageMagick, affecting versions prior to 6.3.5-9, including those in Canonical Ubuntu Linux. It stems from a sign extension error in the ReadDIBImage function, leading to an integer overflow and subsequent heap-based buffer overflow when processing crafted image files with malicious width values. With a CVSS score of 7.8 (High), this vulnerability allows context-dependent attackers to execute arbitrary code with user interaction (UI:R), potentially leading to complete compromise of confidentiality, integrity, and availability (C:H/I:H/A:H). Despite its severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.