The delegate code in ImageMagick 6.2.4.x allows remote attackers to execute arbitrary commands via shell metacharacters in a filename that is processed by the display command. (CVE-2005-4601)

A format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3, and other versions, allows user-complicit attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program. (CVE-2006-0082)

The updated packages have been patched to correct these issues.

Red Hat セキュリティアドバイザリ 2007:0015 から：

いくつかのセキュリティの問題を修正する更新済みの ImageMagick パッケージが、現在利用可能です。

Red Hat セキュリティレスポンスチームは、この更新は重要度中のセキュリティ影響があると評価しています。

ImageMagick は、複数の画像形式の読み書きを行うことのできる、X Window System 用の画像表示・操作ツールです。

ImageMagick が DCM、PALM、SGI グラフィックファイルをデコードする方法で、いくつかのセキュリティの欠陥が見つかりました。被害者を騙して特別に細工された画像ファイルを開かせることができた場合、攻撃者が被害者のマシンで任意のコードを実行する可能性がありました（CVE-2006-5456、CVE-2006-5868）。

ImageMagick で、ヒープオーバーフローの欠陥が見つかりました。被害者を騙して、特別に細工されたファイルを開かせることができた場合、攻撃者が被害者のマシンで任意のコードを実行する可能性がありました（CVE-2006-2440）。この問題は、Red Hat Enterprise Linux 4 で配布された ImageMagick だけに影響します。

ImageMagick のユーザーは、バックポートされたパッチが含まれるこれらの更新済みパッケージにアップグレードし、これらの問題を解決する必要があります。

Several remote vulnerabilities have been discovered in Imagemagick, a collection of image manipulation tools, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2006-2440     Eero Hakkinen discovered that the display tool     allocates insufficient memory for globbing patterns,     which might lead to a buffer overflow.

  - CVE-2006-3743     Tavis Ormandy from the Google Security Team discovered     that the Sun bitmap decoder performs insufficient input     sanitising, which might lead to buffer overflows and the     execution of arbitrary code.

  - CVE-2006-3744     Tavis Ormandy from the Google Security Team discovered     that the XCF image decoder performs insufficient input     sanitising, which might lead to buffer overflows and the     execution of arbitrary code.

Updated ImageMagick packages that correct several security issues are now available.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats.

Several security flaws were discovered in the way ImageMagick decodes DCM, PALM, and SGI graphic files. An attacker may be able to execute arbitrary code on a victim's machine if they were able to trick the victim into opening a specially crafted image file (CVE-2006-5456, CVE-2006-5868).

A heap overflow flaw was found in ImageMagick. An attacker may be able to execute arbitrary code on a victim's machine if they were able to trick the victim into opening a specially crafted file (CVE-2006-2440). This issue only affected the version of ImageMagick distributed with Red Hat Enterprise Linux 4.

Users of ImageMagick should upgrade to these updated packages, which contain backported patches to correct these issues.

From Red Hat Security Advisory 2007:0015 :

Updated ImageMagick packages that correct several security issues are now available.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats.

Several security flaws were discovered in the way ImageMagick decodes DCM, PALM, and SGI graphic files. An attacker may be able to execute arbitrary code on a victim's machine if they were able to trick the victim into opening a specially crafted image file (CVE-2006-5456, CVE-2006-5868).

A heap overflow flaw was found in ImageMagick. An attacker may be able to execute arbitrary code on a victim's machine if they were able to trick the victim into opening a specially crafted file (CVE-2006-2440). This issue only affected the version of ImageMagick distributed with Red Hat Enterprise Linux 4.

Users of ImageMagick should upgrade to these updated packages, which contain backported patches to correct these issues.

来自 Red Hat 安全公告 2007:0015：

更新后的 ImageMagick 程序包修正了多个安全问题，现在可用。

Red Hat 安全响应团队将此更新评级为具有中等安全影响。

ImageMagick 是用于 X Window 系统的图像显示和操纵工具，可以读取和写入多种图像格式。

在 ImageMagick 解码 DCM、PALM 和 SGI 图形文件的方式中发现多个安全缺陷。如果攻击者能够诱骗受害者打开特别构建的图像文件，则可在受害者的计算机上执行任意代码（CVE-2006-5456、CVE-2006-5868）。

在 ImageMagick 中发现一个堆溢出缺陷。如果攻击者能够诱骗受害者打开特别构建的文件，则可在受害者的计算机上执行任意代码 (CVE-2006-2440)。此问题仅影响随 Red Hat Enterprise Linux 4 发行的 ImageMagick 版本。

ImageMagick 用户应升级这些更新后的程序包，其中包含用于修正这些问题的向后移植的修补程序。

來自 Red Hat 安全性公告 2007:0015：

現已提供更新版 ImageMagick 套件，其可更正數個安全性問題。

Red Hat 安全性回應團隊已將此更新評等為具有中等安全性影響。

ImageMagick 是適用於 X Windows System 的影像顯示和操控工具，可以讀取和寫入多種影像格式。

在 ImageMagick 解碼 DCM、PALM 和 SGI 圖形檔案的方式中發現數個安全性瑕疵。攻擊者若能誘騙受害者開啟特製的影像檔，便或許可在該受害者的機器上執行任意程式碼 (CVE-2006-5456、CVE-2006-5868)。

在 ImageMagick 中發現堆積溢位瑕疵。攻擊者若能誘騙受害者開啟特製的檔案，便或許可在該受害者的機器上執行任意程式碼 (CVE-2006-2440)。此問題只會影響隨 Red Hat Enterprise Linux 4 發佈的 ImageMagick 版本。

ImageMagick 的使用者應升級至這些更新版套件，其中包含可更正這些問題的反向移植修補程式。

ID	名稱	產品	系列	已發布	已更新	嚴重性
20818	Mandrake Linux Security Advisory : ImageMagick (MDKSA-2006:024)	Nessus	Mandriva Local Security Checks	2006/1/29	2021/1/6	high
67439	Oracle Linux 3 / 4：ImageMagick（ELSA-2007-0015）	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
22710	Debian DSA-1168-1 : imagemagick - several vulnerabilities	Nessus	Debian Local Security Checks	2006/10/14	2021/1/4	high
24363	RHEL 2.1 / 3 / 4 : ImageMagick (RHSA-2007:0015)	Nessus	Red Hat Local Security Checks	2007/2/17	2021/1/14	high
24357	CentOS 3 / 4 : ImageMagick (CESA-2007:0015)	Nessus	CentOS Local Security Checks	2007/2/17	2021/1/4	high
67439	Oracle Linux 3 / 4 : ImageMagick (ELSA-2007-0015)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
67439	Oracle Linux 3 / 4：ImageMagick (ELSA-2007-0015)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
67439	Oracle Linux 3 / 4 : ImageMagick (ELSA-2007-0015)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high