Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-523-1
HistoryOct 03, 2007 - 12:00 a.m.

ImageMagick vulnerabilities

2007-10-0300:00:00
ubuntu.com
34

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.6%

JSON

Releases

  • Ubuntu 7.04
  • Ubuntu 6.10
  • Ubuntu 6.06

Packages

  • imagemagick -

Details

Multiple vulnerabilities were found in the image decoders of ImageMagick.
If a user or automated system were tricked into processing a malicious
DCM, DIB, XBM, XCF, or XWD image, a remote attacker could execute arbitrary
code with user privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.04noarchlibmagick9< 7:6.2.4.5.dfsg1-0.14ubuntu0.2UNKNOWN
Ubuntu7.04noarchimagemagick< 7:6.2.4.5.dfsg1-0.14ubuntu0.2UNKNOWN
Ubuntu7.04noarchlibmagick++9-dev< 7:6.2.4.5.dfsg1-0.14ubuntu0.2UNKNOWN
Ubuntu7.04noarchlibmagick++9c2a< 7:6.2.4.5.dfsg1-0.14ubuntu0.2UNKNOWN
Ubuntu7.04noarchlibmagick9-dev< 7:6.2.4.5.dfsg1-0.14ubuntu0.2UNKNOWN
Ubuntu7.04noarchperlmagick< 7:6.2.4.5.dfsg1-0.14ubuntu0.2UNKNOWN
Ubuntu6.10noarchlibmagick9< 7:6.2.4.5.dfsg1-0.10ubuntu0.4UNKNOWN
Ubuntu6.10noarchimagemagick< 7:6.2.4.5.dfsg1-0.10ubuntu0.4UNKNOWN
Ubuntu6.10noarchlibmagick++9-dev< 7:6.2.4.5.dfsg1-0.10ubuntu0.4UNKNOWN
Ubuntu6.10noarchlibmagick++9c2a< 7:6.2.4.5.dfsg1-0.10ubuntu0.4UNKNOWN
Rows per page:
1-10 of 181

Related

securityvulns 5
openvas 28
nessus 14
freebsd 1
gentoo 1
oraclelinux 2
centos 2
osv 2
debian 2
redhat 2
cve 4
nvd 4
ubuntucve 4
prion 4
cvelist 4
debiancve 4
seebug 2
veracode 3
securityvulns
securityvulns
ImageMagic multiple security vulnerabilities
2007-09-24 00:00:00
iDefense Security Advisory 09.19.07: Multiple Vendor ImageMagick Multiple Denial of Service Vulnerabilities
2007-09-24 00:00:00
iDefense Security Advisory 09.19.07: Multiple Vendor ImageMagick Multiple Integer Overflow Vulnerabilities
2007-09-24 00:00:00
openvas
openvas
Ubuntu Update for imagemagick vulnerabilities USN-523-1
2009-03-23 00:00:00
Gentoo Security Advisory GLSA 200710-27 (imagemagick)
2008-09-24 00:00:00
FreeBSD Ports: ImageMagick, ImageMagick-nox11
2008-09-04 00:00:00
nessus
nessus
openSUSE 10 Security Update : ImageMagick (ImageMagick-4543)
2007-11-01 00:00:00
GLSA-200710-27 : ImageMagick: Multiple vulnerabilities
2007-10-25 00:00:00
FreeBSD : ImageMagick -- multiple vulnerabilities (f5b29ec0-71f9-11dc-8c6a-00304881ac9a)
2007-10-12 00:00:00
freebsd
freebsd
ImageMagick -- multiple vulnerabilities
2007-09-19 00:00:00
gentoo
gentoo
ImageMagick: Multiple vulnerabilities
2007-10-24 00:00:00
oraclelinux
oraclelinux
ImageMagick security update
2008-04-17 00:00:00
ImageMagick security and bug fix update
2012-03-01 00:00:00
centos
centos
ImageMagick security update
2008-04-17 15:52:20
ImageMagick security update
2008-04-18 00:17:42
osv
osv
imagemagick - several vulnerabilities
2009-08-10 00:00:00
graphicsmagick - several
2009-10-07 00:00:00
debian
debian
[SECURITY] [DSA 1858-1] New imagemagick packages fix several vulnerabilities
2009-08-10 17:05:37
[SECURITY] [DSA 1903-1] New graphicsmagick packages fix several vulnerabilities
2009-10-07 19:08:51
redhat
redhat
(RHSA-2008:0145) Moderate: ImageMagick security update
2008-04-16 00:00:00
(RHSA-2008:0165) Moderate: ImageMagick security update
2008-04-16 00:00:00
cve
cve
CVE-2007-4987
2007-09-24 22:17:00
CVE-2007-4986
2007-09-24 22:17:00
CVE-2007-4988
2007-09-24 22:17:00
nvd
nvd
CVE-2007-4986
2007-09-24 22:17:00
CVE-2007-4985
2007-09-24 22:17:00
CVE-2007-4988
2007-09-24 22:17:00
ubuntucve
ubuntucve
CVE-2007-4985
2007-09-24 00:00:00
CVE-2007-4988
2007-09-24 00:00:00
CVE-2007-4987
2007-09-24 00:00:00
prion
prion
Integer overflow
2007-09-24 22:17:00
Integer overflow
2007-09-24 22:17:00
Out-of-bounds
2007-09-24 22:17:00
cvelist
cvelist
CVE-2007-4988
2007-09-24 22:00:00
CVE-2007-4986
2007-09-24 22:00:00
CVE-2007-4987
2007-09-24 22:00:00
debiancve
debiancve
CVE-2007-4986
2007-09-24 22:17:00
CVE-2007-4987
2007-09-24 22:17:00
CVE-2007-4988
2007-09-24 22:17:00
seebug
seebug
ImageMagick ReadDIBImage函数整数溢出漏洞
2007-09-25 00:00:00
ImageMagick blob.c文件单字节缓冲区溢出漏洞
2007-09-25 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:20:12
Arbitrary Code Execution
2020-04-10 00:20:11
Denial Of Service (DoS)
2020-04-10 00:20:11

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.6%

JSON
Related for USN-523-1
securityvulns5openvas28nessus14freebsd1gentoo1oraclelinux2centos2osv2debian2redhat2cve4nvd4ubuntucve4prion4cvelist4debiancve4seebug2veracode3