Lucene search

K
ubuntuUbuntuUSN-784-1
HistoryJun 08, 2009 - 12:00 a.m.

ImageMagick vulnerability

2009-06-0800:00:00
ubuntu.com
34

8.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.055 Low

EPSS

Percentile

93.1%

Releases

  • Ubuntu 9.04
  • Ubuntu 8.10
  • Ubuntu 8.04
  • Ubuntu 6.06

Packages

  • imagemagick -

Details

It was discovered that ImageMagick did not properly verify the dimensions
of TIFF files. If a user or automated system were tricked into opening a
crafted TIFF file, an attacker could cause a denial of service or possibly
execute arbitrary code with the privileges of the user invoking the
program.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.04noarchlibmagickcore1< 7:6.4.5.4.dfsg1-1ubuntu3.1UNKNOWN
Ubuntu9.04noarchimagemagick< 7:6.4.5.4.dfsg1-1ubuntu3.1UNKNOWN
Ubuntu9.04noarchimagemagick-dbg< 7:6.4.5.4.dfsg1-1ubuntu3.1UNKNOWN
Ubuntu9.04noarchlibmagick++-dev< 7:6.4.5.4.dfsg1-1ubuntu3.1UNKNOWN
Ubuntu9.04noarchlibmagick++1< 7:6.4.5.4.dfsg1-1ubuntu3.1UNKNOWN
Ubuntu9.04noarchlibmagickcore-dev< 7:6.4.5.4.dfsg1-1ubuntu3.1UNKNOWN
Ubuntu9.04noarchlibmagickwand-dev< 7:6.4.5.4.dfsg1-1ubuntu3.1UNKNOWN
Ubuntu9.04noarchlibmagickwand1< 7:6.4.5.4.dfsg1-1ubuntu3.1UNKNOWN
Ubuntu9.04noarchperlmagick< 7:6.4.5.4.dfsg1-1ubuntu3.1UNKNOWN
Ubuntu8.10noarchlibmagick10< 7:6.3.7.9.dfsg1-2ubuntu3.1UNKNOWN
Rows per page:
1-10 of 271

8.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.055 Low

EPSS

Percentile

93.1%