Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo: GLSA-200710-27 Normal: ImageMagick Code Execution Threat

gentoo
Calendar Grey October 25, 2007
Scroller Gentoo
Several security flaws identified in ImageMagick, posing risks of remote code execution and denial of service. Users of Gentoo are advised to upgrade promptly.
Multiple vulnerabilities have been discovered in ImageMagick, possibly resulting in arbitrary code execution or a Denial of Service.

Summary

Gentoo Linux Security Advisory GLSA 200710-27 https://security.gentoo.org/ Severity: Normal Title: ImageMagick: Multiple vulnerabilities Date: October 24, 2007 Bugs: #186030 ID: 200710-27

Synopsis ======= Multiple vulnerabilities have been discovered in ImageMagick, possibly resulting in arbitrary code execution or a Denial of Service.
Background ========= ImageMagick is a collection of tools and libraries for manipulating various image formats.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-gfx/imagemagick < 6.3.5.10 >= 6.3.5.10
========== regenrecht reported multiple infinite loops in functions ReadDCMImage() and ReadXCFImage() (CVE-2007-4985), multiple i...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service gentoo arbitrary code execution image processing

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory denial of service gentoo arbitrary code execution image processing

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround