Description
ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers (1) an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls; or (2) an infinite loop in the ReadXCFImage function, related to ReadBlobMSBLong function calls.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/27364 ↗
- http://secunia.com/advisories/29857 ↗
- http://www.redhat.com/support/errata/RHSA-2008-0145.html ↗
- http://www.securityfocus.com/archive/1/483572/100/0/threaded ↗
- http://www.ubuntu.com/usn/usn-523-1 ↗
- http://secunia.com/advisories/27309 ↗
- http://secunia.com/advisories/29786 ↗
- http://www.imagemagick.org/script/changelog.php ↗
- http://www.vupen.com/english/advisories/2007/3245 ↗
- http://security.gentoo.org/glsa/glsa-200710-27.xml ↗
- http://www.securitytracker.com/id?1018729 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10869 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36740 ↗
- http://secunia.com/advisories/27048 ↗
- http://www.redhat.com/support/errata/RHSA-2008-0165.html ↗
- http://secunia.com/advisories/28721 ↗
- http://secunia.com/advisories/27439 ↗
- https://issues.rpath.com/browse/RPL-1743 ↗
- http://www.debian.org/security/2009/dsa-1858 ↗
- http://studio.imagemagick.org/pipermail/magick-announce/2007-September/000037.html ↗
- http://secunia.com/advisories/26926 ↗
- http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:035 ↗
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=596 ↗
- http://www.securityfocus.com/bid/25764 ↗
- http://bugs.gentoo.org/show_bug.cgi?id=186030 ↗
- http://www.novell.com/linux/security/advisories/2007_23_sr.html ↗
- http://secunia.com/advisories/36260 ↗