 Damian Put has reported a vulnerability in ImageMagick, which can be exploited by malicious people to cause a DoS (Denial of Service).
The vulnerability is caused due to a boundary error in the "ReadPNMImage()" function when decoding PNM image files. This can be exploited to cause a heap-based buffer overflow by e.g. tricking a user into viewing a specially crafted PNM image.
Successful exploitation crashes the application. It is currently not believed that this issue can be exploited for code execution purposes.
The vulnerability has been reported in versions 6.x up to and including 6.2.1.
SOFTWARE:
ImageMagick 6.x
SOLUTION:
Update to version 6.2.2.
http://www.imagemagick.org/script/download.php
PROVIDED AND/OR DISCOVERED BY:
Damian Put
ORIGINAL ADVISORY:
http://www.overflow.pl/adv/imheapoverflow.txt
VERIFY ADVISORY:
http://secunia.com/advisories/15124/
Secunia Security Advisories
| 
Contribute :
Advanced Search :
Web Resources :
Polls :
File Repository
