Red Hat Security AdvisoryRHSA-2006:0633
ImageMagick security update
Released 2006-08-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 ImageMagick-5.5.6-20, ImageMagick-5.5.6-20.i386, ImageMagick-c++-5.5.6-20 +7
- Red Hat Enterprise Linux AS version 3 ImageMagick-5.5.6-20, ImageMagick-5.5.6-20.i386, ImageMagick-5.5.6-20.ia64 +17
- Red Hat Enterprise Linux AS version 4 ImageMagick-6.0.7.1-16, ImageMagick-6.0.7.1-16.i386, ImageMagick-6.0.7.1-16.ia64 +17
- Red Hat Enterprise Linux Desktop version 4 ImageMagick-6.0.7.1-16, ImageMagick-6.0.7.1-16.i386, ImageMagick-c++-6.0.7.1-16 +7
- Red Hat Enterprise Linux ES version 3 ImageMagick-5.5.6-20, ImageMagick-5.5.6-20.i386, ImageMagick-5.5.6-20.ia64 +12
- Red Hat Enterprise Linux ES version 4 ImageMagick-6.0.7.1-16, ImageMagick-6.0.7.1-16.i386, ImageMagick-6.0.7.1-16.ia64 +12
- Red Hat Enterprise Linux WS version 3 ImageMagick-5.5.6-20, ImageMagick-5.5.6-20.i386, ImageMagick-5.5.6-20.ia64 +12
- Red Hat Enterprise Linux WS version 4 ImageMagick-6.0.7.1-16, ImageMagick-6.0.7.1-16.i386, ImageMagick-6.0.7.1-16.ia64 +12
Fixes 3 records
Priority LOW 30
Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun Rasterfile (bitmap) images that trigger heap-based buffer overflows.
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.03691 · Published 2006-08-25 · Fixed CWE-189
Priority LOW 30
Multiple buffer overflows in ImageMagick before 6.2.9 allow user-assisted attackers to execute arbitrary code via crafted XCF images.
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.03675 · Published 2006-08-25 · Fixed
Priority LOW 26
Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.1103 · Published 2006-08-15 · Fixed
