Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted (1) .dcm, (2) .dib, (3) .xbm, (4) .xcf, or (5) .xwd image file, which triggers a heap-based buffer overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Imagemagick | Imagemagick | 5.3.3 (including) | 5.3.3 (including) |
| Imagemagick | Imagemagick | 5.3.8 (including) | 5.3.8 (including) |
| Imagemagick | Imagemagick | 5.4.2.3 (including) | 5.4.2.3 (including) |
| Imagemagick | Imagemagick | 5.4.3 (including) | 5.4.3 (including) |
| Imagemagick | Imagemagick | 5.4.4.5 (including) | 5.4.4.5 (including) |
| Imagemagick | Imagemagick | 5.4.7 (including) | 5.4.7 (including) |
| Imagemagick | Imagemagick | 5.4.8 (including) | 5.4.8 (including) |
| Imagemagick | Imagemagick | 5.4.8.2_1.1.0 (including) | 5.4.8.2_1.1.0 (including) |
| Imagemagick | Imagemagick | 5.5.3_.2_1.2.0 (including) | 5.5.3_.2_1.2.0 (including) |
| Imagemagick | Imagemagick | 5.5.4 (including) | 5.5.4 (including) |
| Imagemagick | Imagemagick | 5.5.6 (including) | 5.5.6 (including) |
| Imagemagick | Imagemagick | 5.5.6.0_20030409 (including) | 5.5.6.0_20030409 (including) |
| Imagemagick | Imagemagick | 5.5.7 (including) | 5.5.7 (including) |
| Imagemagick | Imagemagick | 5.5.7.15 (including) | 5.5.7.15 (including) |
| Imagemagick | Imagemagick | 6.0 (including) | 6.0 (including) |
| Imagemagick | Imagemagick | 6.0.1 (including) | 6.0.1 (including) |
| Imagemagick | Imagemagick | 6.0.2 (including) | 6.0.2 (including) |
| Imagemagick | Imagemagick | 6.0.2.5 (including) | 6.0.2.5 (including) |
| Imagemagick | Imagemagick | 6.0.3 (including) | 6.0.3 (including) |
| Imagemagick | Imagemagick | 6.0.4 (including) | 6.0.4 (including) |
| Imagemagick | Imagemagick | 6.0.4.4 (including) | 6.0.4.4 (including) |
| Imagemagick | Imagemagick | 6.0.5 (including) | 6.0.5 (including) |
| Imagemagick | Imagemagick | 6.0.6 (including) | 6.0.6 (including) |
| Imagemagick | Imagemagick | 6.0.6.2 (including) | 6.0.6.2 (including) |
| Imagemagick | Imagemagick | 6.0.7 (including) | 6.0.7 (including) |
| Imagemagick | Imagemagick | 6.0.8 (including) | 6.0.8 (including) |
| Imagemagick | Imagemagick | 6.1 (including) | 6.1 (including) |
| Imagemagick | Imagemagick | 6.1.1 (including) | 6.1.1 (including) |
| Imagemagick | Imagemagick | 6.1.2 (including) | 6.1.2 (including) |
| Imagemagick | Imagemagick | 6.1.3 (including) | 6.1.3 (including) |
| Imagemagick | Imagemagick | 6.1.4 (including) | 6.1.4 (including) |
| Imagemagick | Imagemagick | 6.1.5 (including) | 6.1.5 (including) |
| Imagemagick | Imagemagick | 6.1.6 (including) | 6.1.6 (including) |
| Imagemagick | Imagemagick | 6.1.7 (including) | 6.1.7 (including) |
| Imagemagick | Imagemagick | 6.1.8 (including) | 6.1.8 (including) |
| Imagemagick | Imagemagick | 6.2 (including) | 6.2 (including) |
| Imagemagick | Imagemagick | 6.2.0.3 (including) | 6.2.0.3 (including) |
| Imagemagick | Imagemagick | 6.2.0.7 (including) | 6.2.0.7 (including) |
| Imagemagick | Imagemagick | 6.2.1 (including) | 6.2.1 (including) |
| Imagemagick | Imagemagick | 6.2.2 (including) | 6.2.2 (including) |
| Imagemagick | Imagemagick | 6.2.3 (including) | 6.2.3 (including) |
| Imagemagick | Imagemagick | 6.2.3.4 (including) | 6.2.3.4 (including) |
| Imagemagick | Imagemagick | 6.2.4 (including) | 6.2.4 (including) |
| Imagemagick | Imagemagick | 6.2.4.3 (including) | 6.2.4.3 (including) |
| Imagemagick | Imagemagick | 6.2.4.5 (including) | 6.2.4.5 (including) |
| Imagemagick | Imagemagick | 6.2.5 (including) | 6.2.5 (including) |
| Imagemagick | Imagemagick | 6.2.6 (including) | 6.2.6 (including) |
| Imagemagick | Imagemagick | 6.2.7 (including) | 6.2.7 (including) |
| Imagemagick | Imagemagick | 6.2.8 (including) | 6.2.8 (including) |
| Imagemagick | Imagemagick | 6.2.9 (including) | 6.2.9 (including) |
| Imagemagick | Imagemagick | 6.2.9.2 (including) | 6.2.9.2 (including) |
| Imagemagick | Imagemagick | 6.3.1 (including) | 6.3.1 (including) |
| Imagemagick | Imagemagick | 6.3.2 (including) | 6.3.2 (including) |
| Imagemagick | Imagemagick | 6.3.3_3 (including) | 6.3.3_3 (including) |
| Imagemagick | Imagemagick | 6.3.3_5 (including) | 6.3.3_5 (including) |
| Imagemagick | Imagemagick | 6.3.3_6 (including) | 6.3.3_6 (including) |
| Imagemagick | Imagemagick | 6.3.4 (including) | 6.3.4 (including) |
| Red Hat Enterprise Linux 2.1 | RedHat | ImageMagick-0:5.3.8-21 | * |
| Red Hat Enterprise Linux 3 | RedHat | ImageMagick-0:5.5.6-28 | * |
| Red Hat Enterprise Linux 4 | RedHat | ImageMagick-0:6.0.7.1-17.el4_6.1 | * |
| Red Hat Enterprise Linux 5 | RedHat | ImageMagick-0:6.2.8.0-4.el5_1.1 | * |
| Graphicsmagick | Ubuntu | devel | * |
| Graphicsmagick | Ubuntu | edgy | * |
| Graphicsmagick | Ubuntu | feisty | * |
| Graphicsmagick | Ubuntu | gutsy | * |
| Graphicsmagick | Ubuntu | hardy | * |
| Graphicsmagick | Ubuntu | intrepid | * |
| Graphicsmagick | Ubuntu | upstream | * |
| Imagemagick | Ubuntu | dapper | * |
| Imagemagick | Ubuntu | devel | * |
| Imagemagick | Ubuntu | edgy | * |
| Imagemagick | Ubuntu | feisty | * |
| Imagemagick | Ubuntu | gutsy | * |
| Imagemagick | Ubuntu | hardy | * |
| Imagemagick | Ubuntu | intrepid | * |
| Imagemagick | Ubuntu | upstream | * |