Oval Definition:oval:com.redhat.rhsa:def:20050320
Revision Date:2005-03-23Version:502
Title:RHSA-2005:320: ImageMagick security update (Moderate)
Description:ImageMagick(TM) is an image display and manipulation tool for the X Window System which can read and write multiple image formats.

A format string bug was found in the way ImageMagick handles filenames. An attacker could execute arbitrary code on a victim's machine if they were able to trick the victim into opening a file with a specially crafted name. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2005-0397 to this issue.

Additionally, a bug was fixed which caused ImageMagick(TM) to occasionally segfault when writing TIFF images to standard output.

Users of ImageMagick should upgrade to these updated packages, which contain a backported patch, and are not vulnerable to these issues.
Family:unixClass:patch
Status:Reference(s):CVE-2005-0397
RHSA-2005:320-01
Platform(s):Red Hat Enterprise Linux 4
Product(s):
Definition Synopsis
  • Red Hat Enterprise Linux 4 is installed
  • AND Package Information
  • ImageMagick-c++-devel is earlier than 0:6.0.7.1-10
  • AND ImageMagick-c++-devel is signed with Red Hat master key
  • OR
  • ImageMagick-devel is earlier than 0:6.0.7.1-10
  • AND ImageMagick-devel is signed with Red Hat master key
  • OR
  • ImageMagick-perl is earlier than 0:6.0.7.1-10
  • AND ImageMagick-perl is signed with Red Hat master key
  • OR
  • ImageMagick is earlier than 0:6.0.7.1-10
  • AND ImageMagick is signed with Red Hat master key
  • OR
  • ImageMagick-c++ is earlier than 0:6.0.7.1-10
  • AND ImageMagick-c++ is signed with Red Hat master key
  • BACK