Red Hat Security Advisory

RHSA-2008:0165

ImageMagick security update

Released 2008-04-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ImageMagick-5.3.8-21, ImageMagick-5.3.8-21.i386, ImageMagick-5.3.8-21.ia64 +8
Red Hat Enterprise Linux ES version 2.1 ImageMagick-5.3.8-21, ImageMagick-5.3.8-21.i386, ImageMagick-c++-5.3.8-21.i386 +3
Red Hat Enterprise Linux WS version 2.1 ImageMagick-5.3.8-21, ImageMagick-5.3.8-21.i386, ImageMagick-c++-5.3.8-21.i386 +3
Red Hat Linux Advanced Workstation 2.1 ImageMagick-5.3.8-21, ImageMagick-5.3.8-21.ia64, ImageMagick-c++-5.3.8-21.ia64 +3

Fixes 4 records

TI-2008-01051 CVE-2008-1097 · GHSA-w4vc-7rfv-99f6

Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c…

LOW 37

Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1) ImageMagick 6.2.4-5 and 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denia…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04484 Published 2008-03-05 Fixed CWE-399

TI-2007-04807 CVE-2007-4986 · GHSA-53f2-89vw-gfqr

Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent…

LOW 36

Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted (1) .dcm, (2) .dib, (3) .xbm, (4) .xcf, or (5) .xwd image file, which triggers a heap-bas…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03286 Published 2007-09-24 Fixed CWE-189

TI-2007-01721 CVE-2007-1797 · GHSA-r8m6-cvrj-9326

Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to…

LOW 36

Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) c…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03556 Published 2007-04-02 Fixed CWE-189

TI-2007-04806 CVE-2007-4985 · GHSA-fxg4-75m7-4xj5

ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of…

LOW 24

ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers (1) an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls;…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01814 Published 2007-09-24 Fixed CWE-399