imagemagick: .psd image file decode vulnerability [LWN.net]

Package(s):

imagemagick

CVE #(s):

CAN-2005-0005

Created:

January 18, 2005

Updated:

March 23, 2005

Description:

According to this iDEFENSE advisory, ImageMagick is vulnerable to a heap overflow when decoding .psd image files. This could be remotely exploited allowing an attacker to execute arbitrary code.

Alerts:

Red Hat	RHSA-2005:070-01	2005-03-23
Red Hat	RHSA-2005:071-01	2005-02-15
Gentoo	200501-37	2005-01-26
Gentoo	200501-26	2005-01-20
Debian	DSA-646-1	2005-01-19
Ubuntu	USN-62-1	2005-01-18

(Log in to post comments)

imagemagick: .psd image file decode vulnerability

Posted Mar 31, 2005 4:16 UTC (Thu) by mattdm (subscriber, #18) [Link]

This is also covered in the just-released Fedora advisories:

http://lwn.net/Alerts/129747/
http://lwn.net/Alerts/129748/