• info
• discussion
• exploit
• solution
• references

ImageMagick SGI Image File Remote Heap Buffer Overflow Vulnerability

Solution:
Please see the references for more information and fixes.


ImageMagick ImageMagick 6.0.7

• SuSE ImageMagick-6.0.7-4.10.i586.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/ImageMagick-6.0.7 -4.10.i586.rpm


• SuSE ImageMagick-6.0.7-4.10.x86_64.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/ImageMagick-6.0 .7-4.10.x86_64.rpm


• SuSE ImageMagick-devel-6.0.7-4.10.i586.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/ImageMagick-devel -6.0.7-4.10.i586.rpm


• SuSE ImageMagick-devel-6.0.7-4.10.x86_64.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/ImageMagick-dev el-6.0.7-4.10.x86_64.rpm


• SuSE ImageMagick-Magick++-6.0.7-4.10.i586.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/ImageMagick-Magic k++-6.0.7-4.10.i586.rpm


• SuSE ImageMagick-Magick++-6.0.7-4.10.x86_64.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/ImageMagick-Mag ick++-6.0.7-4.10.x86_64.rpm


• SuSE ImageMagick-Magick++-devel-6.0.7-4.10.i586.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/ImageMagick-Magic k++-devel-6.0.7-4.10.i586.rpm


• SuSE ImageMagick-Magick++-devel-6.0.7-4.10.x86_64.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/ImageMagick-Mag ick++-devel-6.0.7-4.10.x86_64.rpm


• SuSE perl-PerlMagick-6.0.7-4.10.i586.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/perl-PerlMagick-6 .0.7-4.10.i586.rpm


• SuSE perl-PerlMagick-6.0.7-4.10.x86_64.rpm
  SUSE LINUX 9.2:
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/perl-PerlMagick -6.0.7-4.10.x86_64.rpm

ImageMagick ImageMagick 6.1.8

• SuSE ImageMagick-6.1.8-6.4.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/ImageMagick-6.1.8 -6.4.i586.rpm


• SuSE ImageMagick-6.1.8-6.4.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/ImageMagick-6.1 .8-6.4.x86_64.rpm


• SuSE ImageMagick-devel-6.1.8-6.4.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/ImageMagick-devel -6.1.8-6.4.i586.rpm


• SuSE ImageMagick-devel-6.1.8-6.4.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/ImageMagick-dev el-6.1.8-6.4.x86_64.rpm


• SuSE ImageMagick-Magick++-6.1.8-6.4.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/ImageMagick-Magic k++-6.1.8-6.4.i586.rpm


• SuSE ImageMagick-Magick++-6.1.8-6.4.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/ImageMagick-Mag ick++-6.1.8-6.4.x86_64.rpm


• SuSE ImageMagick-Magick++-devel-6.1.8-6.4.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/ImageMagick-Magic k++-devel-6.1.8-6.4.i586.rpm


• SuSE ImageMagick-Magick++-devel-6.1.8-6.4.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/ImageMagick-Mag ick++-devel-6.1.8-6.4.x86_64.rpm


• SuSE perl-PerlMagick-6.1.8-6.4.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/perl-PerlMagick-6 .1.8-6.4.i586.rpm


• SuSE perl-PerlMagick-6.1.8-6.4.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/perl-PerlMagick -6.1.8-6.4.x86_64.rpm

ImageMagick ImageMagick 6.2.3

• SuSE ImageMagick-6.2.3-4.4.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/ImageMagick-6.2. 3-4.4.i586.rpm


• SuSE ImageMagick-6.2.3-4.4.ppc.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/ImageMagick-6.2.3 -4.4.ppc.rpm


• SuSE ImageMagick-6.2.3-4.4.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/ImageMagick-6. 2.3-4.4.x86_64.rpm


• SuSE ImageMagick-devel-6.2.3-4.4.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/ImageMagick-deve l-6.2.3-4.4.i586.rpm


• SuSE ImageMagick-devel-6.2.3-4.4.ppc.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/ImageMagick-devel -6.2.3-4.4.ppc.rpm


• SuSE ImageMagick-devel-6.2.3-4.4.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/ImageMagick-de vel-6.2.3-4.4.x86_64.rpm


• SuSE ImageMagick-Magick++-6.2.3-4.4.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/ImageMagick-Magi ck++-6.2.3-4.4.i586.rpm


• SuSE ImageMagick-Magick++-6.2.3-4.4.ppc.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/ImageMagick-Magic k++-6.2.3-4.4.ppc.rpm


• SuSE ImageMagick-Magick++-6.2.3-4.4.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/ImageMagick-Ma gick++-6.2.3-4.4.x86_64.rpm


• SuSE ImageMagick-Magick++-devel-6.2.3-4.4.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/ImageMagick-Magi ck++-devel-6.2.3-4.4.i586.rpm


• SuSE ImageMagick-Magick++-devel-6.2.3-4.4.ppc.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/ImageMagick-Magic k++-devel-6.2.3-4.4.ppc.rpm


• SuSE ImageMagick-Magick++-devel-6.2.3-4.4.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/ImageMagick-Ma gick++-devel-6.2.3-4.4.x86_64.rpm


• SuSE perl-PerlMagick-6.2.3-4.4.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/perl-PerlMagick- 6.2.3-4.4.i586.rpm


• SuSE perl-PerlMagick-6.2.3-4.4.ppc.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/perl-PerlMagick-6 .2.3-4.4.ppc.rpm


• SuSE perl-PerlMagick-6.2.3-4.4.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/perl-PerlMagic k-6.2.3-4.4.x86_64.rpm


• Trustix imagemagick-6.2.9.1-1tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix imagemagick-6.2.9.1-1tr.i586.rpm
  Trustix Secure Linux 3.0
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix imagemagick-devel-6.2.9.1-1tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix imagemagick-devel-6.2.9.1-1tr.i586.rpm
  Trustix Secure Linux 3.0
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix kernel-smp-2.6.17.11-1tr.i586.rpm
  Trustix Secure Linux 3.0
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix perl-image-magick-6.2.9.1-1tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix perl-image-magick-6.2.9.1-1tr.i586.rpm
  Trustix Secure Linux 3.0
  ftp://ftp.trustix.org/pub/trustix/updates/

ImageMagick ImageMagick 6.2.5

• RedHat Fedora ImageMagick-6.2.5.4-4.2.1.fc5.4.i386.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat Fedora ImageMagick-6.2.5.4-4.2.1.fc5.4.ppc.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat Fedora ImageMagick-6.2.5.4-4.2.1.fc5.4.x86_64.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat Fedora ImageMagick-c++-6.2.5.4-4.2.1.fc5.4.i386.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat Fedora ImageMagick-c++-6.2.5.4-4.2.1.fc5.4.ppc.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat Fedora ImageMagick-c++-6.2.5.4-4.2.1.fc5.4.x86_64.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat Fedora ImageMagick-c++-devel-6.2.5.4-4.2.1.fc5.4.i386.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat Fedora ImageMagick-c++-devel-6.2.5.4-4.2.1.fc5.4.ppc.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat Fedora ImageMagick-c++-devel-6.2.5.4-4.2.1.fc5.4.x86_64.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat Fedora ImageMagick-debuginfo-6.2.5.4-4.2.1.fc5.4.i386.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat Fedora ImageMagick-debuginfo-6.2.5.4-4.2.1.fc5.4.ppc.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat Fedora ImageMagick-debuginfo-6.2.5.4-4.2.1.fc5.4.x86_64.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat Fedora ImageMagick-devel-6.2.5.4-4.2.1.fc5.4.i386.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat Fedora ImageMagick-devel-6.2.5.4-4.2.1.fc5.4.ppc.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat Fedora ImageMagick-devel-6.2.5.4-4.2.1.fc5.4.x86_64.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat Fedora ImageMagick-perl-6.2.5.4-4.2.1.fc5.4.i386.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat Fedora ImageMagick-perl-6.2.5.4-4.2.1.fc5.4.ppc.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat Fedora ImageMagick-perl-6.2.5.4-4.2.1.fc5.4.x86_64.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• SuSE ImageMagick-6.2.5-16.5.i586.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/ImageMagick-6.2.5-16. 5.i586.rpm


• SuSE ImageMagick-6.2.5-16.5.ppc.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/ImageMagick-6.2.5-16.5 .ppc.rpm


• SuSE ImageMagick-6.2.5-16.5.x86_64.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/ImageMagick-6.2.5-1 6.5.x86_64.rpm


• SuSE ImageMagick-devel-6.2.5-16.5.i586.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/ImageMagick-devel-6.2 .5-16.5.i586.rpm


• SuSE ImageMagick-devel-6.2.5-16.5.ppc.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/ImageMagick-devel-6.2. 5-16.5.ppc.rpm


• SuSE ImageMagick-devel-6.2.5-16.5.x86_64.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/ImageMagick-devel-6 .2.5-16.5.x86_64.rpm


• SuSE ImageMagick-Magick++-6.2.5-16.5.i586.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/ImageMagick-Magick++- 6.2.5-16.5.i586.rpm


• SuSE ImageMagick-Magick++-6.2.5-16.5.ppc.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/ImageMagick-Magick++-6 .2.5-16.5.ppc.rpm


• SuSE ImageMagick-Magick++-6.2.5-16.5.x86_64.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/ImageMagick-Magick+ +-6.2.5-16.5.x86_64.rpm


• SuSE ImageMagick-Magick++-devel-6.2.5-16.5.i586.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/ImageMagick-Magick++- devel-6.2.5-16.5.i586.rpm


• SuSE ImageMagick-Magick++-devel-6.2.5-16.5.ppc.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/ImageMagick-Magick++-d evel-6.2.5-16.5.ppc.rpm


• SuSE ImageMagick-Magick++-devel-6.2.5-16.5.x86_64.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/ImageMagick-Magick+ +-devel-6.2.5-16.5.x86_64.rpm


• SuSE perl-PerlMagick-6.2.5-16.5.i586.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/perl-PerlMagick-6.2.5 -16.5.i586.rpm


• SuSE perl-PerlMagick-6.2.5-16.5.ppc.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/perl-PerlMagick-6.2.5- 16.5.ppc.rpm


• SuSE perl-PerlMagick-6.2.5-16.5.x86_64.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/perl-PerlMagick-6.2 .5-16.5.x86_64.rpm