Test ID:	1.3.6.1.4.1.25623.1.0.57997
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2007:0015
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2007:0015. ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats. Several security flaws were discovered in the way ImageMagick decodes DCM, PALM, and SGI graphic files. An attacker may be able to execute arbitrary code on a victim's machine if they were able to trick the victim into opening a specially crafted image file (CVE-2006-5456, CVE-2006-5868). A heap overflow flaw was found in ImageMagick. An attacker may be able to execute arbitrary code on a victim's machine if they were able to trick the victim into opening a specially crafted file (CVE-2006-2440). This issue only affected the version of ImageMagick distributed with Red Hat Enterprise Linux 4. Users of ImageMagick should upgrade to these updated packages, which contain backported patches to correct these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2007-0015.html http://www.redhat.com/security/updates/classification/#moderate Risk factor : Critical CVSS Score: 9.3
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2440 Debian Security Information: DSA-1168 (Google Search) http://www.debian.org/security/2006/dsa-1168 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9481 http://www.redhat.com/support/errata/RHSA-2007-0015.html http://secunia.com/advisories/21719 http://secunia.com/advisories/24186 http://secunia.com/advisories/24284 SGI Security Advisory: 20070201-01-P ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc Common Vulnerability Exposure (CVE) ID: CVE-2006-5456 BugTraq ID: 20707 http://www.securityfocus.com/bid/20707 Bugtraq: 20061127 rPSA-2006-0218-1 ImageMagick (Google Search) http://www.securityfocus.com/archive/1/452718/100/100/threaded Bugtraq: 20070208 rPSA-2007-0029-1 ImageMagick (Google Search) http://www.securityfocus.com/archive/1/459507/100/0/threaded Debian Security Information: DSA-1213 (Google Search) http://www.debian.org/security/2006/dsa-1213 http://security.gentoo.org/glsa/glsa-200611-07.xml http://security.gentoo.org/glsa/glsa-200611-19.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:193 http://www.mandriva.com/security/advisories?name=MDKSA-2007:041 http://www.osvdb.org/29990 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9765 http://secunia.com/advisories/22569 http://secunia.com/advisories/22572 http://secunia.com/advisories/22601 http://secunia.com/advisories/22604 http://secunia.com/advisories/22819 http://secunia.com/advisories/22834 http://secunia.com/advisories/22998 http://secunia.com/advisories/23090 http://secunia.com/advisories/23121 http://secunia.com/advisories/24196 http://secunia.com/advisories/24458 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.352092 SuSE Security Announcement: SUSE-SA:2006:066 (Google Search) http://www.novell.com/linux/security/advisories/2006_66_imagemagick.html SuSE Security Announcement: SUSE-SR:2007:003 (Google Search) http://www.novell.com/linux/security/advisories/2007_3_sr.html http://www.ubuntu.com/usn/usn-372-1 http://www.ubuntu.com/usn/usn-422-1 http://www.vupen.com/english/advisories/2006/4170 http://www.vupen.com/english/advisories/2006/4171 XForce ISS Database: imagemagick-graphicsmagick-palm-bo(29816) https://exchange.xforce.ibmcloud.com/vulnerabilities/29816 Common Vulnerability Exposure (CVE) ID: CVE-2006-5868 BugTraq ID: 21185 http://www.securityfocus.com/bid/21185 http://www.mandriva.com/security/advisories?name=MDKSA-2006:223 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10612 http://secunia.com/advisories/23101 http://secunia.com/advisories/23219 http://www.ubuntu.com/usn/usn-386-1
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.