CVE:CVE-2007-2459
CNNVD:CNNVD-200705-052
Imager 的bmp.c中的read_4bit_bmp函数存在缓冲区溢出漏洞。远程攻击者可以借助4-bit/pixel BMP文件，引起拒绝服务攻击(应用程序崩溃)以及可能执行任意代码。
solution:Upgrade tony_cook imager to a higher version than 0.44,0.44_1,0.45,0.45_2,0.46,0.47,0.48,0.49,0.50,0.51,0.52,0.53,0.54,0.55,0.56,and avoid the version 0.44,0.44_1,0.45,0.45_2,0.46,0.47,0.48,0.49,0.50,0.51,0.52,0.53,0.54,0.55,0.56