Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

ImageMagick Malformed PCX File Heap Overflow Vulnerability

ImageMagick is prone to an heap-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input. The vulnerability occurs when handling malformed PCX files.

Successfully exploiting this issue allows attackers to execute arbitrary code with the privileges of a user running the application. Failed exploit attempts will result in a denial-of-service condition.

ImageMagick 6.2.8-0 and 6.2.4-5 are vulnerable; other versions may also be affected.







 

Privacy Statement
Copyright 2009, SecurityFocus