CVE catalog

CVE-2007-6697

sdl-image1.2: CVE-2007-6697

[CVE catalog]

Severity
High
Published
Source
[NVD] · [CVE record]
EPSS
10.73% · Oct 25, 2026

Buffer overflow in the LWZReadByte function in IMG_gif.c in SDL_image before 1.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third party information.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansdl-image1.2sid1.2.12-14fixed
Debiansdl-image1.2forky1.2.12-14fixed
Debiansdl-image1.2trixie1.2.12-14fixed
Debiansdl-image1.2bookworm1.2.12-13fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansdl-image1.2sourcesid1.2.6-2mediumNot reportedNot reported
Debiansdl-image1.2sourceforky1.2.6-2mediumNot reportedNot reported
Debiansdl-image1.2sourcetrixie1.2.6-2mediumNot reportedNot reported
Debiansdl-image1.2sourcebookworm1.2.6-2mediumNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Source package: [sdl-image1.2]

    Details (2)
    • 1.2.12-13+b2 · amd64 · bookworm

      Fixed · Fixed: 1.2.6-2

      dsa · sdl-image1.2 · debian · bookworm; dsa · sdl-image1.2 · debian · 12

    • 1.2.12-13+b2 · arm64 · bookworm

      Fixed · Fixed: 1.2.6-2

      dsa · sdl-image1.2 · debian · bookworm; dsa · sdl-image1.2 · debian · 12

  • Source package: [sdl-image1.2]

    Details (2)
    • 1.2.12-13+b2 · amd64 · bookworm

      Fixed · Fixed: 1.2.6-2

      dsa · sdl-image1.2 · debian · bookworm; dsa · sdl-image1.2 · debian · 12

    • 1.2.12-13+b2 · arm64 · bookworm

      Fixed · Fixed: 1.2.6-2

      dsa · sdl-image1.2 · debian · bookworm; dsa · sdl-image1.2 · debian · 12

[Debian 13 (Trixie)]

  • Source package: [sdl-image1.2]

    Details (2)
    • 1.2.12-14 · amd64 · trixie

      Fixed · Fixed: 1.2.6-2

      dsa · sdl-image1.2 · debian · 13

    • 1.2.12-14 · arm64 · trixie

      Fixed · Fixed: 1.2.6-2

      dsa · sdl-image1.2 · debian · 13

  • Source package: [sdl-image1.2]

    Details (2)
    • 1.2.12-14 · amd64 · trixie

      Fixed · Fixed: 1.2.6-2

      dsa · sdl-image1.2 · debian · 13

    • 1.2.12-14 · arm64 · trixie

      Fixed · Fixed: 1.2.6-2

      dsa · sdl-image1.2 · debian · 13

Observed:

References