|
|
Family: SuSE Local Security Checks --> Category: infos
SUSE-SA:2006:066: ImageMagick Vulnerability Scan
Vulnerability Scan Summary
Check for the version of the ImageMagick package
Detailed Explanation for this Vulnerability Test
The remote host is missing the patch for the advisory SUSE-SA:2006:066 (ImageMagick).
Two security problems were found in the GraphicsMagick tool set which
are also present in ImageMagick.
CVE-2006-5456: Multiple buffer overflows in ImageMagick allowed
user-assisted attackers to cause a denial of service and possibly
execute execute arbitrary code via (1) a DCM image that is not
properly handled by the ReadDCMImage function in coders/dcm.c, or
(2) a PALM image that is not properly handled by the ReadPALMImage
function in coders/palm.c.
Additionally a segfault regression when converting a PGM image was
fixed on SLE 10.
Solution : http://www.suse.de/security/http://www.novell.com/linux/security/advisories/2006_66_imagemagick.html
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
