Submitted by KeesCook on Tue, 2006-11-28 12:07
Referenced CVEs:
CVE-2006-5868
Description:
===========================================================
Ubuntu Security Notice USN-386-1 November 28, 2006
imagemagick vulnerability
CVE-2006-5868
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 5.10
Ubuntu 6.06 LTS
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 5.10:
libmagick6 6:6.2.3.4-1ubuntu1.5
Ubuntu 6.06 LTS:
libmagick9 6:6.2.4.5-0.6ubuntu0.4
In general, a standard system upgrade is sufficient to effect the
necessary changes.
Details follow:
Daniel Kobras discovered multiple buffer overflows in ImageMagick's SGI
file format decoder. By tricking a user or an automated system into
processing a specially crafted SGI image, this could be exploited to
execute arbitrary code with the user's privileges.
