Lucene search
Ubuntu.comUB:CVE-2009-1882HistoryJun 02, 2009 - 12:00 a.m.
CVE-2009-1882
2009-06-0200:00:00
ubuntu.com
ubuntu.com
20
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.055
Percentile
93.2%
Integer overflow in the XMakeImage function in magick/xwindow.c in
ImageMagick 6.5.2-8, and GraphicsMagick, allows remote attackers to cause a
denial of service (crash) and possibly execute arbitrary code via a crafted
TIFF file, which triggers a buffer overflow. NOTE: some of these details
are obtained from third party information.
Notes
| Author | Note |
|---|---|
| jdstrand | patch is from svn commit r513 in trunk (but has extra stuff that is unrelated) |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 9.04 | noarch | graphicsmagick | < 1.1.11-3.2+lenny1build0.9.04.1 | UNKNOWN |
| ubuntu | 6.06 | noarch | imagemagick | < 6:6.2.4.5-0.6ubuntu0.9 | UNKNOWN |
| ubuntu | 8.04 | noarch | imagemagick | < 7:6.3.7.9.dfsg1-2ubuntu1.1 | UNKNOWN |
| ubuntu | 8.10 | noarch | imagemagick | < 7:6.3.7.9.dfsg1-2ubuntu3.1 | UNKNOWN |
| ubuntu | 9.04 | noarch | imagemagick | < 7:6.4.5.4.dfsg1-1ubuntu3.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | imagemagick | < 7:6.4.5.4.dfsg1-1ubuntu4 | UNKNOWN |
| ubuntu | 10.04 | noarch | imagemagick | < 7:6.4.5.4.dfsg1-1ubuntu4 | UNKNOWN |
| ubuntu | 10.10 | noarch | imagemagick | < 7:6.4.5.4.dfsg1-1ubuntu4 | UNKNOWN |
| ubuntu | 11.04 | noarch | imagemagick | < 7:6.4.5.4.dfsg1-1ubuntu4 | UNKNOWN |
| ubuntu | 11.10 | noarch | imagemagick | < 7:6.4.5.4.dfsg1-1ubuntu4 | UNKNOWN |
Related
nessus
nessus
CentOS 4 : ImageMagick (CESA-2010:0653)
2010-08-26 00:00:00
ImageMagick < 6.5.2-9 magick/xwindow.c XMakeImage() Function TIFF File Handling Overflow
2009-05-29 00:00:00
Fedora 12 : GraphicsMagick-1.3.7-4.fc12 (2010-0036)
2010-07-01 00:00:00
openvas
openvas
CentOS Update for ImageMagick CESA-2010:0653 centos4 i386
2010-08-30 00:00:00
Mandrake Security Advisory MDVSA-2009:261 (graphicsmagick)
2009-10-13 00:00:00
SLES11: Security update for ImageMagick
2009-10-11 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: GraphicsMagick-1.3.7-4.fc12
2010-01-12 20:38:34
[SECURITY] Fedora 11 Update: ImageMagick-6.5.1.2-2.fc11
2010-01-07 21:51:05
[SECURITY] Fedora 11 Update: GraphicsMagick-1.3.7-4.fc11
2010-01-12 20:48:55
oraclelinux
oraclelinux
ImageMagick security and bug fix update
2010-08-25 00:00:00
ImageMagick security update
2010-08-25 00:00:00
ImageMagick security and bug fix update
2012-03-01 00:00:00
prion
prion
Integer overflow
2009-06-02 15:30:00
ubuntu
ubuntu
ImageMagick vulnerability
2009-06-08 00:00:00
centos
centos
ImageMagick security update
2010-08-25 17:20:42
ImageMagick security update
2010-08-25 17:23:04
redhat
redhat
(RHSA-2010:0653) Moderate: ImageMagick security update
2010-08-25 00:00:00
(RHSA-2010:0652) Moderate: ImageMagick security and bug fix update
2010-08-25 00:00:00
cvelist
cvelist
CVE-2009-1882
2009-06-02 15:00:00
debiancve
debiancve
CVE-2009-1882
2009-06-02 15:30:00
gentoo
gentoo
ImageMagick: User-assisted execution of arbitrary code
2010-06-01 00:00:00
GraphicsMagick: Multiple vulnerabilities
2013-11-19 00:00:00
securityvulns
securityvulns
ImageMagick integer overflow
2009-06-09 00:00:00
[USN-784-1] ImageMagick vulnerability
2009-06-09 00:00:00
cve
cve
CVE-2009-1882
2009-06-02 15:30:00
nvd
nvd
CVE-2009-1882
2009-06-02 15:30:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:47:34
debian
debian
osv
osv
imagemagick - several vulnerabilities
2009-08-10 00:00:00
graphicsmagick - several
2009-10-07 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.055
Percentile
93.2%
Related for UB:CVE-2009-1882