Red Hat Security AdvisoryRHSA-2007:0015
ImageMagick security update
Released 2007-02-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 ImageMagick-5.5.6-24, ImageMagick-5.5.6-24.i386, ImageMagick-c++-5.5.6-24 +7
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ImageMagick-5.3.8-18, ImageMagick-5.3.8-18.i386, ImageMagick-5.3.8-18.ia64 +8
- Red Hat Enterprise Linux AS version 3 ImageMagick-5.5.6-24, ImageMagick-5.5.6-24.i386, ImageMagick-5.5.6-24.ia64 +17
- Red Hat Enterprise Linux AS version 4 ImageMagick-6.0.7.1-16.0.3, ImageMagick-6.0.7.1-16.0.3.i386, ImageMagick-6.0.7.1-16.0.3.ia64 +17
- Red Hat Enterprise Linux Desktop version 4 ImageMagick-6.0.7.1-16.0.3, ImageMagick-6.0.7.1-16.0.3.i386, ImageMagick-c++-6.0.7.1-16.0.3 +7
- Red Hat Enterprise Linux ES version 2.1 ImageMagick-5.3.8-18, ImageMagick-5.3.8-18.i386, ImageMagick-c++-5.3.8-18.i386 +3
- Red Hat Enterprise Linux ES version 3 ImageMagick-5.5.6-24, ImageMagick-5.5.6-24.i386, ImageMagick-5.5.6-24.ia64 +12
- Red Hat Enterprise Linux ES version 4 ImageMagick-6.0.7.1-16.0.3, ImageMagick-6.0.7.1-16.0.3.i386, ImageMagick-6.0.7.1-16.0.3.ia64 +12
- Red Hat Enterprise Linux WS version 2.1 ImageMagick-5.3.8-18, ImageMagick-5.3.8-18.i386, ImageMagick-c++-5.3.8-18.i386 +3
- Red Hat Enterprise Linux WS version 3 ImageMagick-5.5.6-24, ImageMagick-5.5.6-24.i386, ImageMagick-5.5.6-24.ia64 +12
- Red Hat Enterprise Linux WS version 4 ImageMagick-6.0.7.1-16.0.3, ImageMagick-6.0.7.1-16.0.3.i386, ImageMagick-6.0.7.1-16.0.3.ia64 +12
- Red Hat Linux Advanced Workstation 2.1 ImageMagick-5.3.8-18, ImageMagick-5.3.8-18.ia64, ImageMagick-c++-5.3.8-18.ia64 +3
Fixes 3 records
Priority MEDIUM 45
Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assisted attack vectors via a crafted SGI image.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.02894 · Published 2006-11-22 · Fixed
Priority LOW 38
Heap-based buffer overflow in the libMagick component of ImageMagick 6.0.6.2 might allow attackers to execute arbitrary code via an image index array that triggers the overflow during filename glob expansion by the Expan…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02931 · Published 2006-05-18 · Fixed
Priority LOW 30
Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handl…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.03795 · Published 2006-10-23 · Fixed CWE-119
THREATIST.IORead the docs