Red Hat Security AdvisoryRHSA-2006:0178
ImageMagick security update
Released 2006-02-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 ImageMagick-5.5.6-18, ImageMagick-5.5.6-18.i386, ImageMagick-c++-5.5.6-18 +7
- Red Hat Enterprise Linux AS version 3 ImageMagick-5.5.6-18, ImageMagick-5.5.6-18.i386, ImageMagick-5.5.6-18.ia64 +17
- Red Hat Enterprise Linux AS version 4 ImageMagick-6.0.7.1-14, ImageMagick-6.0.7.1-14.i386, ImageMagick-6.0.7.1-14.ia64 +17
- Red Hat Enterprise Linux Desktop version 4 ImageMagick-6.0.7.1-14, ImageMagick-6.0.7.1-14.i386, ImageMagick-c++-6.0.7.1-14 +7
- Red Hat Enterprise Linux ES version 3 ImageMagick-5.5.6-18, ImageMagick-5.5.6-18.i386, ImageMagick-5.5.6-18.ia64 +12
- Red Hat Enterprise Linux ES version 4 ImageMagick-6.0.7.1-14, ImageMagick-6.0.7.1-14.i386, ImageMagick-6.0.7.1-14.ia64 +12
- Red Hat Enterprise Linux WS version 3 ImageMagick-5.5.6-18, ImageMagick-5.5.6-18.i386, ImageMagick-5.5.6-18.ia64 +12
- Red Hat Enterprise Linux WS version 4 ImageMagick-6.0.7.1-14, ImageMagick-6.0.7.1-14.i386, ImageMagick-6.0.7.1-14.ia64 +12
Fixes 2 records
Priority LOW 39
The delegate code in ImageMagick 6.2.4.5-0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename that is processed by the display command.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03661 · Published 2006-01-01 · Fixed
Priority LOW 30
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute a…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.04344 · Published 2006-01-04 · Fixed CWE-134
