CVE-2007-4964

MEDIUM 5.0CVE-2007-4964 · Published 18/09/2007 · updated 16/06/2026

In short

CVE-2007-4964 is a MEDIUM (CVSS 5.0) vulnerability affecting winimage (winimage).
Chance of exploitation in the next 30 days (EPSS): 2.8%, higher than 86.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
winimage winimage	`= 8.0= 8.10`	No fix yet

Description

WinImage 8.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via an invalid BPB_BytsPerSec field in the header of a .IMG file.

References

osvdb.org/45950
securityreason.com/securityalert/3140
securityfocus.com/archive/1/479695/100/0/threaded
securityfocus.com/bid/25687 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/36669

More vulnerabilities in winimage

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free