Several security problems have been fixed in ImageMagick :

  - Several heap buffer overflow were found in the Sun     Bitmap decoder of ImageMagick by an audit by the Google     Security Team. This problem could be exploited by an     attacker to execute code. (CVE-2006-3744)

  - Multiple buffer overflows were found in the XCF plugin     due to incorrect bounds checking by the Google Security     Team. This problem could be exploited by an attacker to     execute code. (CVE-2006-3743)

  - A integer overflow in the ReadSGIImage function can be     used by attackers to potentially execute code.
    (CVE-2006-4144)

  - An infinite loop in ImageMagick caused by TransformHSB     was fixed.

  - An infinite loop in handling of TIFF images was fixed.

Red Hat セキュリティアドバイザリ 2006:0633 から：

いくつかのセキュリティ問題を修正する更新済みの ImageMagick パッケージが、現在利用可能です。

Red Hat セキュリティレスポンスチームは、この更新は重要度中のセキュリティ影響があると評価しています。

ImageMagick(TM) は、複数の画像形式の読み取り/書き込みを行うことができる、X Window System 用の画像表示および操作ツールです。

Tavis Ormandy 氏は、ImageMagick が XCF、SGI、および Sun ビットマップのグラフィックファイルをデコードする方法で、いくつかの整数およびバッファオーバーフローの欠陥を発見しました。被害者を騙して、特別に細工された画像ファイルを開かせることができた場合、攻撃者が被害者のマシンで任意のコードを実行する可能性があります。（CVE-2006-3743、 CVE-2006-3744、CVE-2006-4144）

ImageMagick のユーザーは、これらの問題に対する脆弱性がない、バックポートされたパッチが含まれるこれらの更新済みパッケージにアップグレードする必要があります。

来自 Red Hat 安全公告 2006:0633：

更新后的 ImageMagick 程序包修复了多个安全问题，现在可用。

Red Hat 安全响应团队将此更新评级为具有中等安全影响。

ImageMagick(TM) 是用于 X Window 系统的图像显示和操作工具，可以读取和写入多种图像格式。

Tavis Ormandy 发现 ImageMagick 解码 XCF、SGI 和 Sun 位图图形文件的方式中存在多个整数和缓冲区溢出缺陷。攻击者若能诱骗受害者打开特别构建的图像文件，便可在受害者的计算机上执行任意代码。（CVE-2006-3743、CVE-2006-3744、CVE-2006-4144）

ImageMagick 用户应升级这些更新后的程序包，其中包含向后移植的修补程序，因此不易受这些问题的影响。

Multiple buffer overflows in ImageMagick before 6.2.9 allow user-assisted attackers to execute arbitrary code via crafted XCF images. (CVE-2006-3743)

Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun bitmap images that trigger heap-based buffer overflows.
(CVE-2006-3744)

Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow. (CVE-2006-4144)

The updated packages have been patched to correct these issues.

Tavis Ormandy discovered several buffer overflows in imagemagick's Sun Raster and XCF (Gimp) image decoders. By tricking a user or automated system into processing a specially crafted image, this could be exploited to execute arbitrary code with the users' privileges.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

來自 Red Hat 安全性公告 2006:0633：

現已提供更新版 ImageMagick 套件，其可修正數個安全性問題。

Red Hat 安全性回應團隊已將此更新評等為具有中等安全性影響。

ImageMagick(TM) 是適用於 X Windows System 的影像顯示和操控工具，可以讀取和寫入多種影像格式。

Tavis Ormandy 發現，ImageMagick 解碼 XCF、SGI 和 Sun 點陣圖圖形檔案的方式有數個整數和緩衝區溢位瑕疵。攻擊者若能誘騙受害者開啟特製的影像檔案，便可在該受害者的機器上執行任意程式碼。(CVE-2006-3743、CVE-2006-3744、CVE-2006-4144)

ImageMagick 使用者應升級至這些更新版套件，其中包含多個反向移植修補程式，且不易受這些問題影響。

The remote host is affected by the vulnerability described in GLSA-200609-14 (ImageMagick: Multiple Vulnerabilities)

    Tavis Ormandy of the Google Security Team discovered a stack and heap     buffer overflow in the GIMP XCF Image decoder and multiple heap and     integer overflows in the SUN bitmap decoder. Damian Put discovered a     heap overflow in the SGI image decoder.
  Impact :

    An attacker may be able to create a specially crafted image that, when     processed with ImageMagick, executes arbitrary code with the privileges     of the executing user.
  Workaround :

    There is no known workaround at this time.

Several remote vulnerabilities have been discovered in Imagemagick, a collection of image manipulation tools, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2006-2440     Eero Hakkinen discovered that the display tool     allocates insufficient memory for globbing patterns,     which might lead to a buffer overflow.

  - CVE-2006-3743     Tavis Ormandy from the Google Security Team discovered     that the Sun bitmap decoder performs insufficient input     sanitising, which might lead to buffer overflows and the     execution of arbitrary code.

  - CVE-2006-3744     Tavis Ormandy from the Google Security Team discovered     that the XCF image decoder performs insufficient input     sanitising, which might lead to buffer overflows and the     execution of arbitrary code.

Several security problems have been fixed in ImageMagick :

  - CVE-2006-3744: Several heap buffer overflow were found     in the Sun Bitmap decoder of ImageMagick by an audit by     the Google Security Team. This problem could be     exploited by an attacker to execute code.

  - CVE-2006-3743: Multiple buffer overflows were found in     the XCF handling due to incorrect bounds checking by the     Google Security Team. This problem could be exploited by     an attacker to execute code.

  - CVE-2006-4144: A integer overflow in the ReadSGIImage     function can be used by attackers to potentially execute     code.

  - An infinite loop in ImageMagick caused by TransformHSB     was fixed.

  - An infinite loop in handling of TIFF images was fixed.

Updated ImageMagick packages that fix several security issues are now available.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

ImageMagick(TM) is an image display and manipulation tool for the X Window System that can read and write multiple image formats.

Tavis Ormandy discovered several integer and buffer overflow flaws in the way ImageMagick decodes XCF, SGI, and Sun bitmap graphic files. An attacker could execute arbitrary code on a victim's machine if they were able to trick the victim into opening a specially crafted image file. (CVE-2006-3743, CVE-2006-3744, CVE-2006-4144)

Users of ImageMagick should upgrade to these updated packages, which contain backported patches and are not vulnerable to these issues.

From Red Hat Security Advisory 2006:0633 :

Updated ImageMagick packages that fix several security issues are now available.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

ImageMagick(TM) is an image display and manipulation tool for the X Window System that can read and write multiple image formats.

Tavis Ormandy discovered several integer and buffer overflow flaws in the way ImageMagick decodes XCF, SGI, and Sun bitmap graphic files. An attacker could execute arbitrary code on a victim's machine if they were able to trick the victim into opening a specially crafted image file. (CVE-2006-3743, CVE-2006-3744, CVE-2006-4144)

Users of ImageMagick should upgrade to these updated packages, which contain backported patches and are not vulnerable to these issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
29347	SuSE 10 Security Update : ImageMagick (ZYPP Patch Number 2048)	Nessus	SuSE Local Security Checks	2007/12/13	2021/1/14	medium
67403	Oracle Linux 4：ImageMagick（ELSA-2006-0633）	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	medium
67403	Oracle Linux 4：ImageMagick (ELSA-2006-0633)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	medium
23899	Mandrake Linux Security Advisory : ImageMagick (MDKSA-2006:155)	Nessus	Mandriva Local Security Checks	2006/12/16	2021/1/6	high
27919	Ubuntu 5.04 / 5.10 / 6.06 LTS : imagemagick vulnerabilities (USN-340-1)	Nessus	Ubuntu Local Security Checks	2007/11/10	2021/1/19	medium
67403	Oracle Linux 4 : ImageMagick (ELSA-2006-0633)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	medium
22458	GLSA-200609-14 : ImageMagick: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2006/9/27	2021/1/6	medium
22710	Debian DSA-1168-1 : imagemagick - several vulnerabilities	Nessus	Debian Local Security Checks	2006/10/14	2021/1/4	high
27104	openSUSE 10 Security Update : ImageMagick (ImageMagick-2006)	Nessus	SuSE Local Security Checks	2007/10/17	2021/1/14	medium
22280	CentOS 3 / 4 : ImageMagick (CESA-2006:0633)	Nessus	CentOS Local Security Checks	2006/8/30	2021/1/4	medium
22292	RHEL 2.1 / 3 / 4 : ImageMagick (RHSA-2006:0633)	Nessus	Red Hat Local Security Checks	2006/8/30	2021/1/14	medium
67403	Oracle Linux 4 : ImageMagick (ELSA-2006-0633)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	medium

偵測

搜尋 Plugin

medium

medium

medium

high

medium

medium

medium

high

medium

medium

medium

medium