Vulnerability Name:

CVE-2007-4986 (CCN-36738)

Assigned:2007-09-19
Published:2007-09-19
Updated:2018-10-15
Summary:Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted (1) .dcm, (2) .dib, (3) .xbm, (4) .xcf, or (5) .xwd image file, which triggers a heap-based buffer overflow.
CVSS v3 Severity:9.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
7.6 High (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C)
5.6 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-189
CWE-190
Vulnerability Consequences:Gain Access
References:Source: CONFIRM
Type: UNKNOWN
http://bugs.gentoo.org/show_bug.cgi?id=186030

Source: MITRE
Type: CNA
CVE-2007-4986

Source: IDEFENSE
Type: UNKNOWN
20070919 Multiple Vendor ImageMagick Multiple Integer Overflow Vulnerabilities

Source: CCN
Type: RHSA-2008-0145
Moderate: ImageMagick security update

Source: CCN
Type: RHSA-2008-0165
Moderate: ImageMagick security update

Source: CCN
Type: SA26926
ImageMagick Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
26926

Source: SECUNIA
Type: UNKNOWN
27048

Source: SECUNIA
Type: UNKNOWN
27309

Source: SECUNIA
Type: UNKNOWN
27364

Source: SECUNIA
Type: UNKNOWN
27439

Source: SECUNIA
Type: UNKNOWN
28721

Source: CCN
Type: SA29094
GraphicsMagick Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
29786

Source: SECUNIA
Type: UNKNOWN
29857

Source: CCN
Type: SA35316
Omniformat ImageMagick Integer Overflow Vulnerability

Source: SECUNIA
Type: UNKNOWN
35316

Source: SECUNIA
Type: UNKNOWN
36260

Source: GENTOO
Type: UNKNOWN
GLSA-200710-27

Source: CCN
Type: SECTRACK ID: 1018729
ImageMagick Off-by-one and Integer Overflows Let Remote Users Execute Arbitrary Code

Source: MLIST
Type: UNKNOWN
[Magick-announce] 20070917 ImageMagick 6.3.5-9, important security updates

Source: CCN
Type: ASA-2008-167
ImageMagick security update (RHSA-2008-0165)

Source: CCN
Type: ASA-2008-168
ImageMagick security update (RHSA-2008-0145)

Source: DEBIAN
Type: UNKNOWN
DSA-1858

Source: DEBIAN
Type: DSA-1858
imagemagick -- multiple vulnerabilities

Source: DEBIAN
Type: DSA-1903
graphicsmagick -- several vulnerabilities

Source: CCN
Type: GLSA-200710-27
ImageMagick: Multiple vulnerabilities

Source: CCN
Type: GraphicsMagick Web site
GraphicsMagick Image Processing System

Source: CONFIRM
Type: UNKNOWN
http://www.imagemagick.org/script/changelog.php

Source: CCN
Type: ImageMagick Web site
Downloads

Source: MANDRIVA
Type: UNKNOWN
MDVSA-2008:035

Source: SUSE
Type: UNKNOWN
SUSE-SR:2007:023

Source: REDHAT
Type: UNKNOWN
RHSA-2008:0145

Source: REDHAT
Type: UNKNOWN
RHSA-2008:0165

Source: BUGTRAQ
Type: UNKNOWN
20071112 FLEA-2007-0066-1 ImageMagick

Source: BID
Type: Patch
25763

Source: CCN
Type: BID-25763
ImageMagick DCM, DIB, XBM, XCF, and XWD Image Files Multiple Integer Overflow Vulnerabilities

Source: SECTRACK
Type: UNKNOWN
1018729

Source: CCN
Type: Software995 Web site
Software

Source: CCN
Type: USN-523-1
ImageMagick vulnerabilities

Source: UBUNTU
Type: UNKNOWN
USN-523-1

Source: VUPEN
Type: UNKNOWN
ADV-2007-3245

Source: XF
Type: UNKNOWN
imagemagick-multiplefunctions-bo(36738)

Source: XF
Type: UNKNOWN
imagemagick-multiplefunctions-bo(36738)

Source: CONFIRM
Type: UNKNOWN
https://issues.rpath.com/browse/RPL-1743

Source: CCN
Type: iDefense PUBLIC ADVISORY: 09.19.07
Multiple Vendor ImageMagick Multiple Integer Overflow Vulnerabilities

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:9963

Source: SUSE
Type: SUSE-SR:2007:023
SUSE Security Summary Report

Vulnerable Configuration:Configuration 1:
  • cpe:/a:imagemagick:imagemagick:5.3.3:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:5.3.8:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:5.4.2.3:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:5.4.3:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:5.4.4.5:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:5.4.7:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:5.4.8:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:5.4.8.2_1.1.0:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:5.5.3_.2_1.2.0:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:5.5.4:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:5.5.6:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:5.5.6.0_20030409:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:5.5.7:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:5.5.7.15:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.0:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.0.2.5:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.0.4:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.0.4.4:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.0.5:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.0.6:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.0.6.2:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.0.7:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.0.8:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.1:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.1.1:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.1.2:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.1.3:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.1.4:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.1.6:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.1.7:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.1.8:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.2:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.2.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.2.0.7:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.2.3:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.2.3.4:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.2.4:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.2.4.3:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.2.4.5:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.2.5:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.2.6:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.2.7:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.2.8:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.2.9:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.2.9.2:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.3.1:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.3.2:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.3.3_3:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.3.3_5:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.3.3_6:*:*:*:*:*:*:*
  • OR cpe:/a:imagemagick:imagemagick:6.3.4:*:*:*:*:*:*:*

    • Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

    • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

    • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

    • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

    • Configuration RedHat 6:
  • cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

    • Configuration RedHat 7:
  • cpe:/o:redhat:enterprise_linux:5::client:*:*:*:*:*

    • Configuration RedHat 8:
  • cpe:/o:redhat:enterprise_linux:5::client_workstation:*:*:*:*:*

    • Configuration RedHat 9:
  • cpe:/o:redhat:enterprise_linux:5::server:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:graphicsmagick:graphicsmagick:1.1.10:*:*:*:*:*:*:*
  • AND
  • cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:es:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:ws:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:3::ws:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:3::es:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:3::as:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:3::desktop:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*
  • OR cpe:/o:redhat:linux_advanced_workstation:2.1::itanium:*:*:*:*:*
  • OR cpe:/o:canonical:ubuntu:6.06::lts:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2007:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2007::x86_64:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:4.0::x86_64:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:5:*:client_workstation:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2007.1:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2008.0::x86-64:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:4.0:*:*:*:*:*:*:*
  • OR cpe:/o:canonical:ubuntu:7.04:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:5:*:client:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2008.0:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2007.1::x86-64:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4.6.z:ga:as:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4.6.z:ga:es:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:5.0:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20074986
    V
    		CVE-2007-4986
    2022-05-20
    oval:org.opensuse.security:def:26220
    P
    		Security update for MozillaFirefox (Important) (in QA)
    2022-01-14
    oval:org.opensuse.security:def:42345
    P
    		Security update for libmspack (Low)
    2022-01-13
    oval:org.opensuse.security:def:31715
    P
    		Security update for the Linux Kernel (Important)
    2021-12-06
    oval:org.opensuse.security:def:42142
    P
    		Security update for ruby2.5 (Important)
    2021-12-01
    oval:org.opensuse.security:def:31713
    P
    		Security update for clamav (Moderate)
    2021-12-01
    oval:org.opensuse.security:def:32225
    P
    		Security update for postgresql10 (Important)
    2021-11-22
    oval:org.opensuse.security:def:26167
    P
    		Security update for php72 (Moderate)
    2021-11-19
    oval:org.opensuse.security:def:31289
    P
    		Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) (Important)
    2021-10-18
    oval:org.opensuse.security:def:26147
    P
    		Security update for MozillaFirefox (Important)
    2021-10-15
    oval:org.opensuse.security:def:32181
    P
    		Security update for xen (Important)
    2021-09-06
    oval:org.opensuse.security:def:31265
    P
    		Security update for xen (Important)
    2021-09-06
    oval:org.opensuse.security:def:26118
    P
    		Security update for php72 (Important)
    2021-09-02
    oval:org.opensuse.security:def:26112
    P
    		Security update for sssd (Important)
    2021-08-30
    oval:org.opensuse.security:def:32159
    P
    		Security update for webkit2gtk3 (Important)
    2021-08-03
    oval:org.opensuse.security:def:31657
    P
    		Security update for linuxptp (Important)
    2021-07-21
    oval:org.opensuse.security:def:31650
    P
    		Security update for arpwatch (Important)
    2021-06-28
    oval:org.opensuse.security:def:31215
    P
    		Security update for openexr (Important)
    2021-06-24
    oval:org.opensuse.security:def:31204
    P
    		Security update for xterm (Important)
    2021-06-18
    oval:org.opensuse.security:def:31203
    P
    		Security update for apache2 (Important)
    2021-06-17
    oval:org.opensuse.security:def:31639
    P
    		Security update for freeradius-server (Moderate)
    2021-06-11
    oval:org.opensuse.security:def:31638
    P
    		Security update for caribou (Important)
    2021-06-10
    oval:org.opensuse.security:def:36359
    P
    		ImageMagick-6.4.3.6-7.30.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:42579
    P
    		libMagickCore1-32bit-6.4.3.6-7.30.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:36172
    P
    		libMagickCore1-32bit-6.4.3.6-7.30.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:36358
    P
    		GraphicsMagick-1.2.5-4.33.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:26065
    P
    		Security update for polkit (Important)
    2021-06-03
    oval:org.opensuse.security:def:26063
    P
    		Security update for dhcp (Important)
    2021-06-01
    oval:org.opensuse.security:def:26062
    P
    		Security update for djvulibre (Important)
    2021-05-31
    oval:org.opensuse.security:def:31623
    P
    		Security update for libxml2 (Important)
    2021-05-19
    oval:org.opensuse.security:def:32092
    P
    		Security update for the Linux Kernel (Important)
    2021-05-18
    oval:org.opensuse.security:def:32071
    P
    		Security update for qemu (Important)
    2021-04-16
    oval:org.opensuse.security:def:26206
    P
    		Security update for the Linux Kernel (Important)
    2021-03-09
    oval:org.opensuse.security:def:26193
    P
    		Security update for bind (Important)
    2021-02-18
    oval:org.opensuse.security:def:26192
    P
    		Security update for php72 (Important)
    2021-02-17
    oval:org.opensuse.security:def:31724
    P
    		Security update for python (Important)
    2021-02-11
    oval:org.opensuse.security:def:32248
    P
    		Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP3) (Important)
    2021-02-10
    oval:org.opensuse.security:def:26111
    P
    		Security update for cups (Moderate)
    2021-02-02
    oval:org.opensuse.security:def:32120
    P
    		Security update for ImageMagick (Important)
    2021-01-22
    oval:org.opensuse.security:def:32902
    P
    		Security update for openldap2 (Moderate)
    2021-01-14
    oval:org.opensuse.security:def:33096
    P
    		Security update for MozillaFirefox (Important)
    2021-01-12
    oval:org.opensuse.security:def:31357
    P
    		Security update for MozillaFirefox (Important)
    2021-01-12
    oval:org.opensuse.security:def:25984
    P
    		Security update for cyrus-sasl (Important)
    2020-12-28
    oval:org.opensuse.security:def:31570
    P
    		Security update for cyrus-sasl (Important)
    2020-12-28
    oval:org.opensuse.security:def:25983
    P
    		Security update for openexr (Moderate)
    2020-12-23
    oval:org.opensuse.security:def:32015
    P
    		Security update for openssl (Important)
    2020-12-11
    oval:org.opensuse.security:def:32005
    P
    		Security update for xen (Important)
    2020-12-07
    oval:org.opensuse.security:def:35938
    P
    		libMagickCore1-32bit-6.4.3.6-7.26.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:41986
    P
    		libMagickCore1-32bit-6.4.3.6-7.20.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35579
    P
    		libMagickCore1-32bit-6.4.3.6-7.20.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35735
    P
    		libMagickCore1-32bit-6.4.3.6-7.22.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:25131
    P
    		Security update for bash (Important)
    2020-12-01
    oval:org.opensuse.security:def:25925
    P
    		Security update for pcre (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26334
    P
    		Security update for Chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:26544
    P
    		fetchmail on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25721
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:31133
    P
    		Security update for kvm (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31772
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:25965
    P
    		Security update for xorg-x11-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:26497
    P
    		Security update for tor (Important)
    2020-12-01
    oval:org.opensuse.security:def:25628
    P
    		Security update for dpdk (Critical)
    2020-12-01
    oval:org.opensuse.security:def:26537
    P
    		dhcp on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31823
    P
    		Security update for bash (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25500
    P
    		Security update for webkit2gtk3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:31813
    P
    		Security update for apache2-mod_jk (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32392
    P
    		Security update for tomcat6 (Important)
    2020-12-01
    oval:org.opensuse.security:def:26735
    P
    		libMagickCore1-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25909
    P
    		Security update for flash-player (Important)
    2020-12-01
    oval:org.opensuse.security:def:31421
    P
    		Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:27321
    P
    		wpa_supplicant on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25334
    P
    		Security update for java-1_8_0-openjdk (Important)
    2020-12-01
    oval:org.opensuse.security:def:25914
    P
    		Security update for firebird (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26587
    P
    		libgtop on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32023
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25130
    P
    		Security update for ntp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25797
    P
    		Security update for flash-player (Important)
    2020-12-01
    oval:org.opensuse.security:def:26250
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25906
    P
    		Security update for sane-backends (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31059
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25916
    P
    		Security update for flash-player (Important)
    2020-12-01
    oval:org.opensuse.security:def:26453
    P
    		Security update for kauth (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27357
    P
    		ImageMagick on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25571
    P
    		Security update for webkit2gtk3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:26298
    P
    		Security update for mariadb-100 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31801
    P
    		security update for xen (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32863
    P
    		freetype2 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25287
    P
    		Security update for samba (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31501
    P
    		Security update for python-pycrypto (Important)
    2020-12-01
    oval:org.opensuse.security:def:32353
    P
    		Security update for squid3 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26700
    P
    		freetype2 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25907
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:26683
    P
    		dbus-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25206
    P
    		Security update for tigervnc (Important)
    2020-12-01
    oval:org.opensuse.security:def:25830
    P
    		Security update for libimobiledevice, usbmuxd (Important)
    2020-12-01
    oval:org.opensuse.security:def:26538
    P
    		e2fsprogs on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31979
    P
    		Security update for java-1_7_1-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:33135
    P
    		libMagickCore1-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25733
    P
    		Security update for mgetty (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25862
    P
    		Recommended update for mariadb (Important)
    2020-12-01
    oval:org.opensuse.security:def:26937
    P
    		libMagickCore1-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31048
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25707
    P
    		Security update for java-1_7_1-ibm (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26439
    P
    		Security update for MozillaThunderbird (Important)
    2020-12-01
    oval:org.opensuse.security:def:27322
    P
    		x3270 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31405
    P
    		Security update for perl-DBI (Important)
    2020-12-01
    oval:org.opensuse.security:def:25490
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:31762
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:25286
    P
    		Security update for mailman (Important)
    2020-12-01
    oval:org.opensuse.security:def:31414
    P
    		Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:32304
    P
    		Security update for python (Important)
    2020-12-01
    oval:org.opensuse.security:def:31948
    P
    		Security update for gpg2 (Important)
    2020-12-01
    oval:org.opensuse.security:def:26639
    P
    		star on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32544
    P
    		libMagickCore1-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25142
    P
    		Security update for wget (Important)
    2020-12-01
    oval:org.opensuse.security:def:25773
    P
    		Security update for flash-player (Important)
    2020-12-01
    oval:org.opensuse.security:def:26484
    P
    		Security update for chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:31957
    P
    		Security update for gdk2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25489
    P
    		Security update for pam_radius (Important)
    2020-12-01
    oval:org.opensuse.security:def:25848
    P
    		Security update for flex, at, bogofilter, cyrus-imapd, kdelibs4, libQtWebKit4, libbonobo, mdbtools, netpbm, openslp, sgmltool, virtuoso, libqt5-qtwebkit (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26902
    P
    		gd on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25908
    P
    		Security update for flash-player (Important)
    2020-12-01
    oval:org.opensuse.security:def:31491
    P
    		Security update for Python
    2020-12-01
    oval:org.opensuse.security:def:25556
    P
    		Security update for ntp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26400
    P
    		Security update for Chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:26684
    P
    		dbus-1-glib on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25362
    P
    		Security update for mailman (Important)
    2020-12-01
    oval:org.opensuse.security:def:25919
    P
    		Security update for libplist (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26018
    P
    		Security update for freerdp (Important)
    2020-12-01
    oval:org.opensuse.security:def:27170
    P
    		libMagickCore1-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31856
    P
    		Security update for cups (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25863
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26625
    P
    		pam_ldap on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32505
    P
    		enscript on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25692
    P
    		Security update for e2fsprogs (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26333
    P
    		Security update for redis (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31918
    P
    		Security update for gd (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32458
    P
    		Security update for xorg-x11-libX11 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25488
    P
    		Security update for file-roller (Low)
    2020-12-01
    oval:org.opensuse.security:def:25809
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:26264
    P
    		Security update for gegl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31417
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25472
    P
    		Security update for apache2-mod_perl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26351
    P
    		Security update for mongodb (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26640
    P
    		sudo on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32700
    P
    		libMagickCore1-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25298
    P
    		Security update for xerces-c (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26006
    P
    		Security update for mariadb (Important)
    2020-12-01
    oval:org.opensuse.security:def:26485
    P
    		Security update for singularity (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26579
    P
    		libMagickCore1-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25722
    P
    		Security update for ovmf (Low)
    2020-12-01
    oval:org.opensuse.security:def:31859
    P
    		Security update for curl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26004
    P
    		Security update for shotwell (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27135
    P
    		gmime on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31047
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25712
    P
    		Security update for python36 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26586
    P
    		libexiv2-4 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31867
    P
    		Security update for curl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25564
    P
    		Security update for tomcat (Important)
    2020-12-01
    oval:org.opensuse.security:def:26249
    P
    		Security update for libtomcrypt (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31869
    P
    		Security update for curl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32414
    P
    		Security update for wireshark (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25920
    P
    		Security update for gstreamer-plugins-base (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31513
    P
    		Security update for quagga
    2020-12-01
    oval:org.opensuse.security:def:25760
    P
    		Security update for flash-player (Critical)
    2020-12-01
    oval:org.opensuse.security:def:27356
    P
    		GraphicsMagick on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31406
    P
    		Security update for perl-PlRPC (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25415
    P
    		Security update for openldap2 (Important)
    2020-12-01
    oval:org.opensuse.security:def:26626
    P
    		pam_mount on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32661
    P
    		file-32bit on GA media (Moderate)
    2020-12-01
    oval:org.mitre.oval:def:8206
    P
    		DSA-1858 imagemagick -- multiple vulnerabilities
    2015-02-23
    oval:org.mitre.oval:def:13308
    P
    		DSA-1858-1 imagemagick -- multiple
    2015-02-23
    oval:org.mitre.oval:def:17691
    P
    		USN-523-1 -- imagemagick vulnerabilities
    2014-06-30
    oval:org.mitre.oval:def:19472
    P
    		DSA-1903-1 graphicsmagick - several
    2014-06-23
    oval:org.mitre.oval:def:7485
    P
    		DSA-1903 graphicsmagick -- several vulnerabilities
    2014-06-23
    oval:org.mitre.oval:def:22407
    P
    		ELSA-2008:0145: ImageMagick security update (Moderate)
    2014-05-26
    oval:org.mitre.oval:def:9963
    V
    		Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted (1) .dcm, (2) .dib, (3) .xbm, (4) .xcf, or (5) .xwd image file, which triggers a heap-based buffer overflow.
    2013-04-29
    oval:org.debian:def:1903
    V
    		several vulnerabilities
    2009-10-07
    oval:org.debian:def:1858
    V
    		multiple vulnerabilities
    2009-08-10
    oval:com.redhat.rhsa:def:20080145
    P
    		RHSA-2008:0145: ImageMagick security update (Moderate)
    2008-04-17
    BACK
    imagemagick imagemagick 5.3.3
    imagemagick imagemagick 5.3.8
    imagemagick imagemagick 5.4.2.3
    imagemagick imagemagick 5.4.3
    imagemagick imagemagick 5.4.4.5
    imagemagick imagemagick 5.4.7
    imagemagick imagemagick 5.4.8
    imagemagick imagemagick 5.4.8.2_1.1.0
    imagemagick imagemagick 5.5.3_.2_1.2.0
    imagemagick imagemagick 5.5.4
    imagemagick imagemagick 5.5.6
    imagemagick imagemagick 5.5.6.0_20030409
    imagemagick imagemagick 5.5.7
    imagemagick imagemagick 5.5.7.15
    imagemagick imagemagick 6.0
    imagemagick imagemagick 6.0.1
    imagemagick imagemagick 6.0.2
    imagemagick imagemagick 6.0.2.5
    imagemagick imagemagick 6.0.3
    imagemagick imagemagick 6.0.4
    imagemagick imagemagick 6.0.4.4
    imagemagick imagemagick 6.0.5
    imagemagick imagemagick 6.0.6
    imagemagick imagemagick 6.0.6.2
    imagemagick imagemagick 6.0.7
    imagemagick imagemagick 6.0.8
    imagemagick imagemagick 6.1
    imagemagick imagemagick 6.1.1
    imagemagick imagemagick 6.1.2
    imagemagick imagemagick 6.1.3
    imagemagick imagemagick 6.1.4
    imagemagick imagemagick 6.1.5
    imagemagick imagemagick 6.1.6
    imagemagick imagemagick 6.1.7
    imagemagick imagemagick 6.1.8
    imagemagick imagemagick 6.2
    imagemagick imagemagick 6.2.0.3
    imagemagick imagemagick 6.2.0.7
    imagemagick imagemagick 6.2.1
    imagemagick imagemagick 6.2.2
    imagemagick imagemagick 6.2.3
    imagemagick imagemagick 6.2.3.4
    imagemagick imagemagick 6.2.4
    imagemagick imagemagick 6.2.4.3
    imagemagick imagemagick 6.2.4.5
    imagemagick imagemagick 6.2.5
    imagemagick imagemagick 6.2.6
    imagemagick imagemagick 6.2.7
    imagemagick imagemagick 6.2.8
    imagemagick imagemagick 6.2.9
    imagemagick imagemagick 6.2.9.2
    imagemagick imagemagick 6.3.1
    imagemagick imagemagick 6.3.2
    imagemagick imagemagick 6.3.3_3
    imagemagick imagemagick 6.3.3_5
    imagemagick imagemagick 6.3.3_6
    imagemagick imagemagick 6.3.4
    graphicsmagick graphicsmagick 1.1.10
    gentoo linux *
    redhat enterprise linux 2.1
    redhat enterprise linux 2.1
    redhat enterprise linux 2.1
    redhat enterprise linux 3
    redhat enterprise linux 3
    redhat enterprise linux 3
    redhat enterprise linux 3
    redhat enterprise linux 4
    redhat enterprise linux 4
    redhat enterprise linux 4
    redhat enterprise linux 4
    redhat linux advanced workstation 2.1
    canonical ubuntu 6.06
    mandrakesoft mandrake linux 2007
    mandrakesoft mandrake linux 2007
    mandrakesoft mandrake linux corporate server 4.0
    mandrakesoft mandrake linux corporate server 4.0
    redhat enterprise linux 5
    redhat enterprise linux 5
    mandrakesoft mandrake linux 2007.1
    mandrakesoft mandrake linux 2008.0
    debian debian linux 4.0
    canonical ubuntu 7.04
    redhat enterprise linux 5
    mandrakesoft mandrake linux 2008.0
    mandrakesoft mandrake linux 2007.1
    redhat enterprise linux 4.6.z ga
    redhat enterprise linux 4.6.z ga
    debian debian linux 5.0