Family: Mandrake Local Security Checks --> Category: infos
MDKSA-2007:041: ImageMagick Vulnerability Scan
Vulnerability Scan Summary
Check for the version of the ImageMagick package
Detailed Explanation for this Vulnerability Test
The remote host is missing the patch for the advisory MDKSA-2007:041 (ImageMagick).
Vladimir Nadvornik discovered a buffer overflow in GraphicsMagick and
ImageMagick allows user-assisted attackers to cause a denial of service
and possibly execute execute arbitrary code via a PALM image that is
not properly handled by the ReadPALMImage function in coders/palm.c.
This is related to an earlier fix for CVE-2006-5456 that did not fully
correct the issue.
Updated packages have been patched to correct this issue.
Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2007:041
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.