Test ID:	1.3.6.1.4.1.25623.1.0.59310
Category:	Fedora Local Security Checks
Title:	Fedora Core 5 FEDORA-2006-588 (ImageMagick)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to ImageMagick announced via advisory FEDORA-2006-588. ImageMagick(TM) is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed work in the original format or a different one. ImageMagick also includes command line programs for creating animated or transparent .gifs, creating composite images, creating thumbnail images, and more. ImageMagick is one of your choices if you need a program to manipulate and dis play images. If you want to develop your own applications which use ImageMagick code or APIs, you need to install ImageMagick-devel as well. Update Information: ImageMagick's DisplayImageCommand contains a heap overflow flaw. It is possible to pass an unexpanded glob to ImageMagick which will be expanded by ImageMagick and overflow heap memory. The updated packages fix this problem. * Wed May 24 2006 Matthias Clasen - 6.2.5.4-4.2.1.fc4.2 - Fix a heap overflow CVE-2006-2440 (#192279) * Mon Mar 20 2006 Matthias Clasen - 6.2.5.4-4.2.1.fc5.1 - Don't ship .la files (#185237) Solution: Apply the appropriate updates. This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/ This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2006-588 Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2440 Debian Security Information: DSA-1168 (Google Search) http://www.debian.org/security/2006/dsa-1168 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9481 http://www.redhat.com/support/errata/RHSA-2007-0015.html http://secunia.com/advisories/21719 http://secunia.com/advisories/24186 http://secunia.com/advisories/24284 SGI Security Advisory: 20070201-01-P ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.