CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
EPSS
Percentile
97.4%
Several security problems have been fixed in ImageMagick :
Several heap buffer overflow were found in the Sun Bitmap decoder of ImageMagick by an audit by the Google Security Team. This problem could be exploited by an attacker to execute code. (CVE-2006-3744)
Multiple buffer overflows were found in the XCF plugin due to incorrect bounds checking by the Google Security Team. This problem could be exploited by an attacker to execute code. (CVE-2006-3743)
A integer overflow in the ReadSGIImage function can be used by attackers to potentially execute code.
(CVE-2006-4144)
An infinite loop in ImageMagick caused by TransformHSB was fixed.
An infinite loop in handling of TIFF images was fixed.
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The text description of this plugin is (C) Novell, Inc.
#
include('deprecated_nasl_level.inc');
include('compat.inc');
if (description)
{
script_id(29347);
script_version("1.13");
script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/14");
script_cve_id("CVE-2006-3743", "CVE-2006-3744", "CVE-2006-4144");
script_name(english:"SuSE 10 Security Update : ImageMagick (ZYPP Patch Number 2048)");
script_summary(english:"Checks rpm output for the updated packages");
script_set_attribute(
attribute:"synopsis",
value:"The remote SuSE 10 host is missing a security-related patch."
);
script_set_attribute(
attribute:"description",
value:
"Several security problems have been fixed in ImageMagick :
- Several heap buffer overflow were found in the Sun
Bitmap decoder of ImageMagick by an audit by the Google
Security Team. This problem could be exploited by an
attacker to execute code. (CVE-2006-3744)
- Multiple buffer overflows were found in the XCF plugin
due to incorrect bounds checking by the Google Security
Team. This problem could be exploited by an attacker to
execute code. (CVE-2006-3743)
- A integer overflow in the ReadSGIImage function can be
used by attackers to potentially execute code.
(CVE-2006-4144)
- An infinite loop in ImageMagick caused by TransformHSB
was fixed.
- An infinite loop in handling of TIFF images was fixed."
);
script_set_attribute(
attribute:"see_also",
value:"http://support.novell.com/security/cve/CVE-2006-3743.html"
);
script_set_attribute(
attribute:"see_also",
value:"http://support.novell.com/security/cve/CVE-2006-3744.html"
);
script_set_attribute(
attribute:"see_also",
value:"http://support.novell.com/security/cve/CVE-2006-4144.html"
);
script_set_attribute(attribute:"solution", value:"Apply ZYPP patch number 2048.");
script_set_cvss_base_vector("CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"cpe:/o:suse:suse_linux");
script_set_attribute(attribute:"patch_publication_date", value:"2006/08/25");
script_set_attribute(attribute:"plugin_publication_date", value:"2007/12/13");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 2007-2021 Tenable Network Security, Inc.");
script_family(english:"SuSE Local Security Checks");
script_dependencies("ssh_get_info.nasl");
script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");
exit(0);
}
include("global_settings.inc");
include("rpm.inc");
if (!get_kb_item("Host/local_checks_enabled")) exit(0, "Local checks are not enabled.");
if (!get_kb_item("Host/SuSE/release")) exit(0, "The host is not running SuSE.");
if (!get_kb_item("Host/SuSE/rpm-list")) exit(1, "Could not obtain the list of installed packages.");
cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) exit(1, "Failed to determine the architecture type.");
if (cpu >!< "x86_64" && cpu !~ "^i[3-6]86$") exit(1, "Local checks for SuSE 10 on the '"+cpu+"' architecture have not been implemented.");
flag = 0;
if (rpm_check(release:"SLED10", sp:0, reference:"ImageMagick-6.2.5-16.5")) flag++;
if (rpm_check(release:"SLED10", sp:0, reference:"ImageMagick-Magick++-6.2.5-16.5")) flag++;
if (rpm_check(release:"SLED10", sp:0, reference:"ImageMagick-devel-6.2.5-16.5")) flag++;
if (flag)
{
if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
else security_warning(0);
exit(0);
}
else exit(0, "The host is not affected.");
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3743
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3744
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4144
support.novell.com/security/cve/CVE-2006-3743.html
support.novell.com/security/cve/CVE-2006-3744.html
support.novell.com/security/cve/CVE-2006-4144.html