Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo GLSA-200503-11 Normal: ImageMagick Filename Handling Risk

gentoo
Calendar Grey March 6, 2005
Scroller Gentoo
Vulnerability discovered in ImageMagick file management on Gentoo systems could permit execution of arbitrary code. Users are encouraged to apply updates promptly to safeguard their systems.
A format string vulnerability exists in ImageMagick that may allow an attacker to execute arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200503-11 https://security.gentoo.org/ Severity: Normal Title: ImageMagick: Filename handling vulnerability Date: March 06, 2005 Bugs: #83542 ID: 200503-11

Synopsis ======= A format string vulnerability exists in ImageMagick that may allow an attacker to execute arbitrary code.
Background ========= ImageMagick is a collection of tools and libraries for manipulating a wide variety of image formats.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-gfx/imagemagick < 6.2.0.4 >= 6.2.0.4
========== Tavis Ormandy of the Gentoo Linux Security Audit Team has identified a flaw in the handling of filenames by the ImageMagick u...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo code execution image handling normal severity

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo code execution image handling normal severity

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround