Red Hat Security AdvisoryRHSA-2008:0145
ImageMagick security update
Released 2008-04-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 ImageMagick-5.5.6-28, ImageMagick-5.5.6-28.i386, ImageMagick-c++-5.5.6-28 +7
- Red Hat Enterprise Linux (v. 5 server) ImageMagick-6.2.8.0-4.el5_1.1, ImageMagick-6.2.8.0-4.el5_1.1.i386, ImageMagick-6.2.8.0-4.el5_1.1.ia64 +17
- Red Hat Enterprise Linux AS version 3 ImageMagick-5.5.6-28, ImageMagick-5.5.6-28.i386, ImageMagick-5.5.6-28.ia64 +17
- Red Hat Enterprise Linux AS version 4 ImageMagick-6.0.7.1-17.el4_6.1, ImageMagick-6.0.7.1-17.el4_6.1.i386, ImageMagick-6.0.7.1-17.el4_6.1.ia64 +17
- Red Hat Enterprise Linux Desktop (v. 5 client) ImageMagick-6.2.8.0-4.el5_1.1, ImageMagick-6.2.8.0-4.el5_1.1.i386, ImageMagick-c++-6.2.8.0-4.el5_1.1 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) ImageMagick-6.2.8.0-4.el5_1.1, ImageMagick-c++-devel-6.2.8.0-4.el5_1.1, ImageMagick-c++-devel-6.2.8.0-4.el5_1.1.i386 +2
- Red Hat Enterprise Linux Desktop version 4 ImageMagick-6.0.7.1-17.el4_6.1, ImageMagick-6.0.7.1-17.el4_6.1.i386, ImageMagick-c++-6.0.7.1-17.el4_6.1 +7
- Red Hat Enterprise Linux ES version 3 ImageMagick-5.5.6-28, ImageMagick-5.5.6-28.i386, ImageMagick-5.5.6-28.ia64 +12
- Red Hat Enterprise Linux ES version 4 ImageMagick-6.0.7.1-17.el4_6.1, ImageMagick-6.0.7.1-17.el4_6.1.i386, ImageMagick-6.0.7.1-17.el4_6.1.ia64 +12
- Red Hat Enterprise Linux WS version 3 ImageMagick-5.5.6-28, ImageMagick-5.5.6-28.i386, ImageMagick-5.5.6-28.ia64 +12
- Red Hat Enterprise Linux WS version 4 ImageMagick-6.0.7.1-17.el4_6.1, ImageMagick-6.0.7.1-17.el4_6.1.i386, ImageMagick-6.0.7.1-17.el4_6.1.ia64 +12
Fixes 6 records
Priority MEDIUM 40
Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.03093 · Published 2007-09-24 · Fixed CWE-681
Priority LOW 37
Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1) ImageMagick 6.2.4-5 and 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denia…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04484 · Published 2008-03-05 · Fixed CWE-399
Priority LOW 37
The load_tile function in the XCF coder in coders/xcf.c in (1) ImageMagick 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbi…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04528 · Published 2008-03-05 · Fixed CWE-119
Priority LOW 36
Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted (1) .dcm, (2) .dib, (3) .xbm, (4) .xcf, or (5) .xwd image file, which triggers a heap-bas…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03286 · Published 2007-09-24 · Fixed CWE-189
Priority LOW 36
Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) c…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03556 · Published 2007-04-02 · Fixed CWE-189
Priority LOW 24
ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers (1) an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls;…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01814 · Published 2007-09-24 · Fixed CWE-399
THREATIST.IORead the docs