• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

ImageMagick Multiple Unspecified Image Handling Heap-Based Memory Corruption Vulnerabilities

Bugtraq ID:	13100
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 11 2005 12:00AM
Updated:	Apr 11 2005 12:00AM
Credit:	These issues were reported by Bruno Rohee.
Vulnerable:	ImageMagick ImageMagick 6.2 .0.7 + RedHat Fedora Core3 + RedHat Fedora Core2 ImageMagick ImageMagick 6.2 .0.4 + Gentoo Linux ImageMagick ImageMagick 6.2 ImageMagick ImageMagick 6.1.8 + Gentoo Linux ImageMagick ImageMagick 6.1.7 ImageMagick ImageMagick 6.1.6 ImageMagick ImageMagick 6.1.5 ImageMagick ImageMagick 6.1.4 ImageMagick ImageMagick 6.1.3 ImageMagick ImageMagick 6.1.2 ImageMagick ImageMagick 6.1.1 ImageMagick ImageMagick 6.1 ImageMagick ImageMagick 6.0.8 ImageMagick ImageMagick 6.0.7 + RedHat Desktop 4.0 + RedHat Enterprise Linux Desktop version 4 + RedHat Enterprise Linux AS 4 + RedHat Enterprise Linux ES 4 + RedHat Enterprise Linux WS 4 + S.u.S.E. Linux Personal 9.2 x86_64 + S.u.S.E. Linux Personal 9.2 ImageMagick ImageMagick 6.0.6 + Ubuntu Ubuntu Linux 5.0 4 powerpc + Ubuntu Ubuntu Linux 5.0 4 i386 + Ubuntu Ubuntu Linux 5.0 4 amd64 ImageMagick ImageMagick 6.0.5 + Turbolinux Home + Turbolinux Turbolinux Desktop 10.0 + Turbolinux Turbolinux Server 10.0 ImageMagick ImageMagick 6.0.4 + MandrakeSoft Linux Mandrake 10.1 x86_64 + MandrakeSoft Linux Mandrake 10.1 ImageMagick ImageMagick 6.0.3 ImageMagick ImageMagick 6.0.2 .5 + Ubuntu Ubuntu Linux 4.1 ppc + Ubuntu Ubuntu Linux 4.1 ia64 + Ubuntu Ubuntu Linux 4.1 ia32 ImageMagick ImageMagick 6.0.2 + Ubuntu Ubuntu Linux 4.1 ppc + Ubuntu Ubuntu Linux 4.1 ia64 + Ubuntu Ubuntu Linux 4.1 ia32 ImageMagick ImageMagick 6.0.1 ImageMagick ImageMagick 6.0 ImageMagick ImageMagick 5.5.7 + MandrakeSoft Linux Mandrake 10.0 AMD64 + MandrakeSoft Linux Mandrake 10.0 + MandrakeSoft Linux Mandrake 9.2 amd64 + MandrakeSoft Linux Mandrake 9.2 + S.u.S.E. Linux Personal 9.1 x86_64 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 ImageMagick ImageMagick 5.5.6 .0-20030409 + OpenPKG OpenPKG Current ImageMagick ImageMagick 5.5.6 + RedHat Desktop 3.0 + RedHat Enterprise Linux AS 3 + RedHat Enterprise Linux ES 3 + RedHat Enterprise Linux WS 3 ImageMagick ImageMagick 5.5.4 + S.u.S.E. Linux Personal 8.2 ImageMagick ImageMagick 5.5.3 .2-1.2.0 + OpenPKG OpenPKG 1.2 ImageMagick ImageMagick 5.4.8 .2-1.1.0 + OpenPKG OpenPKG 1.1 ImageMagick ImageMagick 5.4.8 + MandrakeSoft Corporate Server 2.1 x86_64 + MandrakeSoft Corporate Server 2.1 ImageMagick ImageMagick 5.4.7 + Turbolinux Turbolinux Server 8.0 ImageMagick ImageMagick 5.4.4 .5 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 ImageMagick ImageMagick 5.4.3 + Turbolinux Turbolinux Workstation 8.0 ImageMagick ImageMagick 5.3.8 + RedHat Enterprise Linux AS 2.1 IA64 + RedHat Enterprise Linux AS 2.1 + RedHat Enterprise Linux ES 2.1 IA64 + RedHat Enterprise Linux ES 2.1 + RedHat Enterprise Linux WS 2.1 IA64 + RedHat Enterprise Linux WS 2.1 ImageMagick ImageMagick 5.3.3 + Turbolinux Turbolinux Server 7.0 + Turbolinux Turbolinux Workstation 7.0
Not Vulnerable: