Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file.

There exists a buffer overflow vulnerability in ImageMagick's EXIF parsing code which may lead to execution of arbitrary code.

A buffer overflow in imagemagick's EXIF parsing routine has been discovered in imagemagick versions prior to 6.1.0. Trying to query EXIF information of a malicious image file might result in execution of arbitrary code with the user's privileges.

Since imagemagick can be used in custom printing systems, this also might lead to privilege escalation (execute code with the printer spooler's privileges). However, Ubuntu's standard printing system does not use imagemagick, thus there is no risk of privilege escalation in a standard installation.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several buffer overflows have been discovered in libxml2's FTP connection and DNS resolution functions. Supplying very long FTP URLs or IP addresses might result in execution of arbitrary code with the privileges of the process using libxml2.

Since libxml2 is used in packages like php4-imagick, the vulnerability also might lead to privilege escalation, like executing attacker supplied code with a web server's privileges.

However, this does not affect the core XML parsing code, which is what the majority of programs use this library for.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated ImageMagick packages that fixes a buffer overflow are now available.

ImageMagick(TM) is an image display and manipulation tool for the X Window System.

A buffer overflow flaw was discovered in the ImageMagick image handler. An attacker could create a carefully crafted image file with an improper EXIF information in such a way that it would cause ImageMagick to execute arbitrary code when processing the image. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0981 to this issue.

David Eisenstein has reported that our previous fix for CVE-2004-0827, a heap overflow flaw, was incomplete. An attacker could create a carefully crafted BMP file in such a way that it could cause ImageMagick to execute arbitrary code when processing the image. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2004-0827 to this issue.

Users of ImageMagick should upgrade to these updated packages, which contain a backported patch, and is not vulnerable to this issue.

A vulnerability was discovered in ImageMagick where, due to a boundary error within the EXIF parsing routine, a specially crafted graphic image could potentially lead to the execution of arbitrary code.

The updated packages have been patched to prevent this problem.

A vulnerability has been reported for ImageMagick, a commonly used image manipulation library. Due to a boundary error within the EXIF parsing routine, a specially crafted graphic image could lead to the execution of arbitrary code.

The remote host is affected by the vulnerability described in GLSA-200411-11 (ImageMagick: EXIF buffer overflow)

    ImageMagick fails to do proper bounds checking when handling image files     with EXIF information.
  Impact :

    An attacker could use an image file with specially crafted EXIF information     to cause arbitrary code execution with the permissions of the user running     ImageMagick.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
37043	FreeBSD : ImageMagick -- EXIF parser buffer overflow (eeb1c128-33e7-11d9-a9e7-0001020eed82)	Nessus	FreeBSD Local Security Checks	critical
20690	Ubuntu 4.10 : imagemagick vulnerability (USN-7-1)	Nessus	Ubuntu Local Security Checks	critical
20485	Ubuntu 4.10 : XML library vulnerabilities (USN-10-1)	Nessus	Ubuntu Local Security Checks	critical
15946	RHEL 2.1 / 3 : ImageMagick (RHSA-2004:636)	Nessus	Red Hat Local Security Checks	critical
15916	Mandrake Linux Security Advisory : ImageMagick (MDKSA-2004:143)	Nessus	Mandriva Local Security Checks	critical
15728	Debian DSA-593-1 : imagemagick - buffer overflow	Nessus	Debian Local Security Checks	critical
15645	GLSA-200411-11 : ImageMagick: EXIF buffer overflow	Nessus	Gentoo Local Security Checks	critical

Detections

Analytics

CVE-2004-0981

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical