Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.57997
Category:Red Hat Local Security Checks
Title:RedHat Security Advisory RHSA-2007:0015
Summary:NOSUMMARY
Description:Description:

The remote host is missing updates announced in
advisory RHSA-2007:0015.

ImageMagick is an image display and manipulation tool for the X Window
System that can read and write multiple image formats.

Several security flaws were discovered in the way ImageMagick decodes DCM,
PALM, and SGI graphic files. An attacker may be able to execute arbitrary
code on a victim's machine if they were able to trick the victim into
opening a specially crafted image file (CVE-2006-5456, CVE-2006-5868).

A heap overflow flaw was found in ImageMagick. An attacker may be able to
execute arbitrary code on a victim's machine if they were able to trick the
victim into opening a specially crafted file (CVE-2006-2440). This issue
only affected the version of ImageMagick distributed with Red Hat
Enterprise Linux 4.

Users of ImageMagick should upgrade to these updated packages, which
contain backported patches to correct these issues.

Solution:
Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date

http://rhn.redhat.com/errata/RHSA-2007-0015.html
http://www.redhat.com/security/updates/classification/#moderate

Risk factor : Critical

CVSS Score:
9.3

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2006-2440
Debian Security Information: DSA-1168 (Google Search)
http://www.debian.org/security/2006/dsa-1168
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9481
http://www.redhat.com/support/errata/RHSA-2007-0015.html
http://secunia.com/advisories/21719
http://secunia.com/advisories/24186
http://secunia.com/advisories/24284
SGI Security Advisory: 20070201-01-P
ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc
Common Vulnerability Exposure (CVE) ID: CVE-2006-5456
BugTraq ID: 20707
http://www.securityfocus.com/bid/20707
Bugtraq: 20061127 rPSA-2006-0218-1 ImageMagick (Google Search)
http://www.securityfocus.com/archive/1/452718/100/100/threaded
Bugtraq: 20070208 rPSA-2007-0029-1 ImageMagick (Google Search)
http://www.securityfocus.com/archive/1/459507/100/0/threaded
Debian Security Information: DSA-1213 (Google Search)
http://www.debian.org/security/2006/dsa-1213
http://security.gentoo.org/glsa/glsa-200611-07.xml
http://security.gentoo.org/glsa/glsa-200611-19.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2006:193
http://www.mandriva.com/security/advisories?name=MDKSA-2007:041
http://www.osvdb.org/29990
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9765
http://secunia.com/advisories/22569
http://secunia.com/advisories/22572
http://secunia.com/advisories/22601
http://secunia.com/advisories/22604
http://secunia.com/advisories/22819
http://secunia.com/advisories/22834
http://secunia.com/advisories/22998
http://secunia.com/advisories/23090
http://secunia.com/advisories/23121
http://secunia.com/advisories/24196
http://secunia.com/advisories/24458
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.352092
SuSE Security Announcement: SUSE-SA:2006:066 (Google Search)
http://www.novell.com/linux/security/advisories/2006_66_imagemagick.html
SuSE Security Announcement: SUSE-SR:2007:003 (Google Search)
http://www.novell.com/linux/security/advisories/2007_3_sr.html
http://www.ubuntu.com/usn/usn-372-1
http://www.ubuntu.com/usn/usn-422-1
http://www.vupen.com/english/advisories/2006/4170
http://www.vupen.com/english/advisories/2006/4171
XForce ISS Database: imagemagick-graphicsmagick-palm-bo(29816)
https://exchange.xforce.ibmcloud.com/vulnerabilities/29816
Common Vulnerability Exposure (CVE) ID: CVE-2006-5868
BugTraq ID: 21185
http://www.securityfocus.com/bid/21185
http://www.mandriva.com/security/advisories?name=MDKSA-2006:223
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10612
http://secunia.com/advisories/23101
http://secunia.com/advisories/23219
http://www.ubuntu.com/usn/usn-386-1
CopyrightCopyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.