Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which results in a heap-based overflow in the ReadXWDImage function, different issues than CVE-2007-1667.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Imagemagick | Imagemagick | 6.3.0.0 (including) | 6.3.0.0 (including) |
| Imagemagick | Imagemagick | 6.3.0.1 (including) | 6.3.0.1 (including) |
| Imagemagick | Imagemagick | 6.3.0.2 (including) | 6.3.0.2 (including) |
| Imagemagick | Imagemagick | 6.3.0.3 (including) | 6.3.0.3 (including) |
| Imagemagick | Imagemagick | 6.3.0.4 (including) | 6.3.0.4 (including) |
| Imagemagick | Imagemagick | 6.3.0.5 (including) | 6.3.0.5 (including) |
| Imagemagick | Imagemagick | 6.3.0.7 (including) | 6.3.0.7 (including) |
| Imagemagick | Imagemagick | 6.3.0.8 (including) | 6.3.0.8 (including) |
| Imagemagick | Imagemagick | 6.3.1.0 (including) | 6.3.1.0 (including) |
| Imagemagick | Imagemagick | 6.3.1.1 (including) | 6.3.1.1 (including) |
| Imagemagick | Imagemagick | 6.3.1.2. (including) | 6.3.1.2. (including) |
| Imagemagick | Imagemagick | 6.3.1.3 (including) | 6.3.1.3 (including) |
| Imagemagick | Imagemagick | 6.3.1.4 (including) | 6.3.1.4 (including) |
| Imagemagick | Imagemagick | 6.3.1.5 (including) | 6.3.1.5 (including) |
| Imagemagick | Imagemagick | 6.3.1.6 (including) | 6.3.1.6 (including) |
| Imagemagick | Imagemagick | 6.3.1.7 (including) | 6.3.1.7 (including) |
| Imagemagick | Imagemagick | 6.3.2.0 (including) | 6.3.2.0 (including) |
| Imagemagick | Imagemagick | 6.3.2.1 (including) | 6.3.2.1 (including) |
| Imagemagick | Imagemagick | 6.3.2.2 (including) | 6.3.2.2 (including) |
| Imagemagick | Imagemagick | 6.3.2.3 (including) | 6.3.2.3 (including) |
| Imagemagick | Imagemagick | 6.3.2.4 (including) | 6.3.2.4 (including) |
| Imagemagick | Imagemagick | 6.3.2.5 (including) | 6.3.2.5 (including) |
| Imagemagick | Imagemagick | 6.3.2.6 (including) | 6.3.2.6 (including) |
| Imagemagick | Imagemagick | 6.3.2.7 (including) | 6.3.2.7 (including) |
| Imagemagick | Imagemagick | 6.3.2.8 (including) | 6.3.2.8 (including) |
| Imagemagick | Imagemagick | 6.3.3.0 (including) | 6.3.3.0 (including) |
| Imagemagick | Imagemagick | 6.3.3.1 (including) | 6.3.3.1 (including) |
| Imagemagick | Imagemagick | 6.3.3.2 (including) | 6.3.3.2 (including) |
| Imagemagick | Imagemagick | 6.3.3.3 (including) | 6.3.3.3 (including) |
| Imagemagick | Imagemagick | 6.3.3.4 (including) | 6.3.3.4 (including) |
| Red Hat Enterprise Linux 2.1 | RedHat | ImageMagick-0:5.3.8-21 | * |
| Red Hat Enterprise Linux 3 | RedHat | ImageMagick-0:5.5.6-28 | * |
| Red Hat Enterprise Linux 4 | RedHat | ImageMagick-0:6.0.7.1-17.el4_6.1 | * |
| Red Hat Enterprise Linux 5 | RedHat | ImageMagick-0:6.2.8.0-4.el5_1.1 | * |
| Graphicsmagick | Ubuntu | devel | * |
| Graphicsmagick | Ubuntu | edgy | * |
| Graphicsmagick | Ubuntu | feisty | * |
| Graphicsmagick | Ubuntu | gutsy | * |
| Graphicsmagick | Ubuntu | hardy | * |
| Imagemagick | Ubuntu | dapper | * |
| Imagemagick | Ubuntu | devel | * |
| Imagemagick | Ubuntu | edgy | * |
| Imagemagick | Ubuntu | feisty | * |
| Imagemagick | Ubuntu | gutsy | * |
| Imagemagick | Ubuntu | hardy | * |