Lucene search

K
ubuntuUbuntuUSN-372-1
HistoryNov 01, 2006 - 12:00 a.m.

imagemagick vulnerability

2006-11-0100:00:00
ubuntu.com
28

7 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.8%

Releases

  • Ubuntu 6.10
  • Ubuntu 6.06
  • Ubuntu 5.10
  • Ubuntu 5.04

Details

M. Joonas Pihlaja discovered that ImageMagick did not sufficiently
verify the validity of PALM and DCM images. When processing a
specially crafted image with an application that uses imagemagick,
this could be exploited to execute arbitrary code with the
application’s privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchlibmagick9< 7:6.2.4.5.dfsg1-0.10ubuntu0.1UNKNOWN
Ubuntu6.06noarchlibmagick9< 6:6.2.4.5-0.6ubuntu0.3UNKNOWN
Ubuntu5.10noarchlibmagick6< 6:6.2.3.4-1ubuntu1.4UNKNOWN
Ubuntu5.04noarchlibmagick6< 6:6.0.6.2-2.1ubuntu1.5UNKNOWN

7 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.8%