An update for ImageMagick is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

[Updated 18 July 2016] This advisory has been updated to push packages into the Red Hat Enterprise Linux 6 Desktop channels. The packages included in this revised update have not been changed in any way from the packages included in the original advisory.

ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats.

Security Fix(es) :

* It was discovered that ImageMagick did not properly sanitize certain input before using it to invoke processes. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would lead to arbitrary execution of shell commands with the privileges of the user running the application.
(CVE-2016-5118)

* It was discovered that ImageMagick did not properly sanitize certain input before passing it to the gnuplot delegate functionality. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would lead to arbitrary execution of shell commands with the privileges of the user running the application. (CVE-2016-5239)

* Multiple flaws have been discovered in ImageMagick. A remote attacker could, for example, create specially crafted images that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would result in a memory corruption and, potentially, execution of arbitrary code, a denial of service, or an application crash. (CVE-2015-8896, CVE-2015-8895, CVE-2016-5240, CVE-2015-8897, CVE-2015-8898)

It was discovered that ImageMagick did not properly sanitize certain input before using it to invoke processes. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would lead to arbitrary execution of shell commands with the privileges of the user running the application.
(CVE-2016-5118)

It was discovered that ImageMagick did not properly sanitize certain input before passing it to the gnuplot delegate functionality. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would lead to arbitrary execution of shell commands with the privileges of the user running the application. (CVE-2016-5239)

Multiple flaws have been discovered in ImageMagick. A remote attacker could, for example, create specially crafted images that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would result in a memory corruption and, potentially, execution of arbitrary code, a denial of service, or an application crash. (CVE-2015-8896 , CVE-2015-8895 , CVE-2016-5240 , CVE-2015-8897 , CVE-2015-8898)

ImageMagick was updated to fix 55 security issues.

These security issues were fixed :

  - CVE-2014-9810: SEGV in dpx file handler (bsc#983803).

  - CVE-2014-9811: Crash in xwd file handler (bsc#984032).

  - CVE-2014-9812: NULL pointer dereference in ps file     handling (bsc#984137).

  - CVE-2014-9813: Crash on corrupted viff file     (bsc#984035).

  - CVE-2014-9814: NULL pointer dereference in wpg file     handling (bsc#984193).

  - CVE-2014-9815: Crash on corrupted wpg file (bsc#984372).

  - CVE-2014-9816: Out of bound access in viff image     (bsc#984398).

  - CVE-2014-9817: Heap buffer overflow in pdb file handling     (bsc#984400).

  - CVE-2014-9818: Out of bound access on malformed sun file     (bsc#984181).

  - CVE-2014-9819: Heap overflow in palm files (bsc#984142).

  - CVE-2014-9830: Handling of corrupted sun file     (bsc#984135).

  - CVE-2014-9831: Handling of corrupted wpg file     (bsc#984375).

  - CVE-2014-9836: Crash in xpm file handling (bsc#984023).

  - CVE-2014-9851: Crash when parsing resource block     (bsc#984160).

  - CVE-2016-5689: NULL ptr dereference in dcm coder     (bsc#985460).

  - CVE-2014-9853: Memory leak in rle file handling     (bsc#984408).

  - CVE-2015-8902: PDB file DoS (CPU consumption)     (bsc#983253).

  - CVE-2015-8903: Denial of service (cpu) in vicar     (bsc#983259).

  - CVE-2015-8901: MIFF file DoS (endless loop)     (bsc#983234).

  - CVE-2014-9834: Heap overflow in pict file (bsc#984436).

  - CVE-2014-9806: Prevent file descriptr leak due to     corrupted file (bsc#983774).

  - CVE-2014-9838: Out of memory crash in magick/cache.c     (bsc#984370).

  - CVE-2014-9854: Filling memory during identification of     TIFF image (bsc#984184).

  - CVE-2015-8898: Prevent NULL pointer access in     magick/constitute.c (bsc#983746).

  - CVE-2015-8894: Double free in coders/tga.c:221     (bsc#983523).

  - CVE-2015-8896: Double free / integer truncation issue in     coders/pict.c:2000 (bsc#983533).

  - CVE-2015-8897: Out of bounds error in SpliceImage     (bsc#983739).

  - CVE-2016-5690: Bad foor loop in DCM coder (bsc#985451).

  - CVE-2016-5691: Checks for pixel.red/green/blue in dcm     coder (bsc#985456).

  - CVE-2014-9805: SEGV due to a corrupted pnm file.
    (bsc#983752).

  - CVE-2014-9808: SEGV due to corrupted dpc images.
    (bsc#983796).

  - CVE-2014-9820: heap overflow in xpm files (bsc#984150).

  - CVE-2014-9823: heap overflow in palm file (bsc#984401).

  - CVE-2014-9822: heap overflow in quantum file     (bsc#984187).

  - CVE-2014-9839: Theoretical out of bound access in     magick/colormap-private.h (bsc#984379).

  - CVE-2014-9824: Heap overflow in psd file (bsc#984185).

  - CVE-2014-9809: Fix a SEGV due to corrupted xwd images.
    (bsc#983799).

  - CVE-2014-9826: Incorrect error handling in sun files     (bsc#984186).

  - CVE-2014-9842: Memory leak in psd handling (bsc#984374).

  - CVE-2016-5687: Out of bounds read in DDS coder     (bsc#985448).

  - CVE-2014-9840: Out of bound access in palm file     (bsc#984433).

  - CVE-2014-9847: Incorrect handling of 'previous' image in     the JNG decoder (bsc#984144).

  - CVE-2014-9846: Added checks to prevent overflow in rle     file. (bsc#983521).

  - CVE-2014-9845: Crash due to corrupted dib file     (bsc#984394).

  - CVE-2014-9844: Out of bound issue in rle file     (bsc#984373).

  - CVE-2014-9849: Crash in png coder (bsc#984018).

  - CVE-2016-5688: Various invalid memory reads in     ImageMagick WPG (bsc#985442).

  - CVE-2014-9807: Fix a double free in pdb coder.
    (bsc#983794).

  - CVE-2014-9829: Out of bound access in sun file     (bsc#984409).

  - CVE-2016-4564: The DrawImage function in     MagickCore/draw.c in ImageMagick made an incorrect     function call in attempting to locate the next token,     which allowed remote attackers to cause a denial of     service (buffer overflow and application crash) or     possibly have unspecified other impact via a crafted     file (bsc#983308).

  - CVE-2016-4563: The TraceStrokePolygon function in     MagickCore/draw.c in ImageMagick mishandled the     relationship between the BezierQuantum value and certain     strokes data, which allowed remote attackers to cause a     denial of service (buffer overflow and application     crash) or possibly have unspecified other impact via a     crafted file (bsc#983305).

  - CVE-2016-4562: The DrawDashPolygon function in     MagickCore/draw.c in ImageMagick mishandled calculations     of certain vertices integer data, which allowed remote     attackers to cause a denial of service (buffer overflow     and application crash) or possibly have unspecified     other impact via a crafted file (bsc#983292).

  - CVE-2014-9837: Additional PNM sanity checks     (bsc#984166).

  - CVE-2014-9835: Heap overflow in wpf file (bsc#984145).

  - CVE-2014-9828: Corrupted (too many colors) psd file     (bsc#984028).

  - CVE-2016-5841: Integer overflow could have read to RCE     (bnc#986609).

  - CVE-2016-5842: Out-of-bounds read in     MagickCore/property.c:1396 could have lead to memory     leak (bnc#986608).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
91642	RHEL 6 / 7 : ImageMagick (RHSA-2016:1237)	Nessus	Red Hat Local Security Checks	2016/6/17	2021/2/5	critical
91768	Amazon Linux AMI : ImageMagick (ALAS-2016-716)	Nessus	Amazon Linux Local Security Checks	2016/6/23	2018/4/18	critical
93178	SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2016:1782-1)	Nessus	SuSE Local Security Checks	2016/8/29	2026/1/27	critical

偵測

搜尋 Plugin

critical

critical

critical