Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-523-1
HistoryOct 03, 2007 - 12:00 a.m.

ImageMagick vulnerabilities

2007-10-0300:00:00
ubuntu.com
47

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.05

Percentile

93.0%

JSON

Releases

  • Ubuntu 7.04
  • Ubuntu 6.10
  • Ubuntu 6.06

Packages

  • imagemagick -

Details

Multiple vulnerabilities were found in the image decoders of ImageMagick.
If a user or automated system were tricked into processing a malicious
DCM, DIB, XBM, XCF, or XWD image, a remote attacker could execute arbitrary
code with user privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.04noarchlibmagick9< 7:6.2.4.5.dfsg1-0.14ubuntu0.2UNKNOWN
Ubuntu7.04noarchimagemagick< 7:6.2.4.5.dfsg1-0.14ubuntu0.2UNKNOWN
Ubuntu7.04noarchlibmagick++9-dev< 7:6.2.4.5.dfsg1-0.14ubuntu0.2UNKNOWN
Ubuntu7.04noarchlibmagick++9c2a< 7:6.2.4.5.dfsg1-0.14ubuntu0.2UNKNOWN
Ubuntu7.04noarchlibmagick9-dev< 7:6.2.4.5.dfsg1-0.14ubuntu0.2UNKNOWN
Ubuntu7.04noarchperlmagick< 7:6.2.4.5.dfsg1-0.14ubuntu0.2UNKNOWN
Ubuntu6.10noarchlibmagick9< 7:6.2.4.5.dfsg1-0.10ubuntu0.4UNKNOWN
Ubuntu6.10noarchimagemagick< 7:6.2.4.5.dfsg1-0.10ubuntu0.4UNKNOWN
Ubuntu6.10noarchlibmagick++9-dev< 7:6.2.4.5.dfsg1-0.10ubuntu0.4UNKNOWN
Ubuntu6.10noarchlibmagick++9c2a< 7:6.2.4.5.dfsg1-0.10ubuntu0.4UNKNOWN
Rows per page:
1-10 of 181

Related

nessus 14
openvas 28
freebsd 1
gentoo 1
securityvulns 5
oraclelinux 2
centos 2
redhat 2
debian 2
osv 2
nvd 4
cve 4
ubuntucve 4
debiancve 4
cvelist 4
prion 4
seebug 2
veracode 3
nessus
nessus
openSUSE 10 Security Update : ImageMagick (ImageMagick-4543)
2007-11-01 00:00:00
GLSA-200710-27 : ImageMagick: Multiple vulnerabilities
2007-10-25 00:00:00
SuSE 10 Security Update : ImageMagick (ZYPP Patch Number 4541)
2007-12-13 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200710-27 (imagemagick)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200710-27 (imagemagick)
2008-09-24 00:00:00
FreeBSD Ports: ImageMagick, ImageMagick-nox11
2008-09-04 00:00:00
freebsd
freebsd
ImageMagick -- multiple vulnerabilities
2007-09-19 00:00:00
gentoo
gentoo
ImageMagick: Multiple vulnerabilities
2007-10-24 00:00:00
securityvulns
securityvulns
ImageMagic multiple security vulnerabilities
2007-09-24 00:00:00
iDefense Security Advisory 09.19.07: Multiple Vendor ImageMagick Multiple Denial of Service Vulnerabilities
2007-09-24 00:00:00
iDefense Security Advisory 09.19.07: Multiple Vendor ImageMagick Multiple Integer Overflow Vulnerabilities
2007-09-24 00:00:00
oraclelinux
oraclelinux
ImageMagick security update
2008-04-17 00:00:00
ImageMagick security and bug fix update
2012-03-01 00:00:00
centos
centos
ImageMagick security update
2008-04-17 15:52:20
ImageMagick security update
2008-04-18 00:17:42
redhat
redhat
(RHSA-2008:0145) Moderate: ImageMagick security update
2008-04-16 00:00:00
(RHSA-2008:0165) Moderate: ImageMagick security update
2008-04-16 00:00:00
debian
debian
[SECURITY] [DSA 1858-1] New imagemagick packages fix several vulnerabilities
2009-08-10 17:05:37
[SECURITY] [DSA 1903-1] New graphicsmagick packages fix several vulnerabilities
2009-10-07 19:08:51
osv
osv
imagemagick - several vulnerabilities
2009-08-10 00:00:00
graphicsmagick - several
2009-10-07 00:00:00
nvd
nvd
CVE-2007-4986
2007-09-24 22:17:00
CVE-2007-4988
2007-09-24 22:17:00
CVE-2007-4985
2007-09-24 22:17:00
cve
cve
CVE-2007-4987
2007-09-24 22:17:00
CVE-2007-4986
2007-09-24 22:17:00
CVE-2007-4985
2007-09-24 22:17:00
ubuntucve
ubuntucve
CVE-2007-4985
2007-09-24 00:00:00
CVE-2007-4987
2007-09-24 00:00:00
CVE-2007-4988
2007-09-24 00:00:00
debiancve
debiancve
CVE-2007-4986
2007-09-24 22:17:00
CVE-2007-4987
2007-09-24 22:17:00
CVE-2007-4988
2007-09-24 22:17:00
cvelist
cvelist
CVE-2007-4986
2007-09-24 22:00:00
CVE-2007-4987
2007-09-24 22:00:00
CVE-2007-4988
2007-09-24 22:00:00
prion
prion
Integer overflow
2007-09-24 22:17:00
Out-of-bounds
2007-09-24 22:17:00
Integer overflow
2007-09-24 22:17:00
seebug
seebug
ImageMagick ReadDIBImage函数整数溢出漏洞
2007-09-25 00:00:00
ImageMagick blob.c文件单字节缓冲区溢出漏洞
2007-09-25 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:20:12
Arbitrary Code Execution
2020-04-10 00:20:11
Denial Of Service (DoS)
2020-04-10 00:20:11

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.05

Percentile

93.0%

JSON
Related for USN-523-1
nessus14openvas28freebsd1gentoo1securityvulns5oraclelinux2centos2redhat2debian2osv2nvd4cve4ubuntucve4debiancve4cvelist4prion4seebug2veracode3