imagemagick: code execution
| Package(s): | imagemagick | CVE #(s): | CVE-2012-3437 | ||||||||||||||||||||||||||||||||
| Created: | August 22, 2012 | Updated: | April 10, 2013 | ||||||||||||||||||||||||||||||||
| Description: | From the Ubuntu advisory:
Tom Lane discovered that ImageMagick would not always properly allocate memory. If a user or automated system using ImageMagick were tricked into opening a specially crafted PNG image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program. | ||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||