The XWD Decoder in ImageMagick before 6.2.2.3, and GraphicsMagick before 1.1.6-r1, allows remote attackers to cause a denial of service (infinite loop) via an image with a zero color mask.

Updated ImageMagick packages that fix a denial of service issue are now available.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

ImageMagick(TM) is an image display and manipulation tool for the X Window System that can read and write multiple image formats.

A denial of service bug was found in the way ImageMagick parses XWD files. A user or program executing ImageMagick to process a malicious XWD file can cause ImageMagick to enter an infinite loop causing a denial of service condition. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-1739 to this issue.

Users of ImageMagick should upgrade to these updated packages, which contain a backported patch, and are not vulnerable to this issue.

A heap-based buffer overflow was found in the way that ImageMagick parses PNM files. If an attacker can trick a victim into opening a specially crafted PNM file, the attacker could execute arbitrary code on the victim's machine (CVE-2005-1275).

As well, a Denial of Service vulnerability was found in the way that ImageMagick parses XWD files. If a user or program executed ImageMagick to process a malicious XWD file, ImageMagick will enter info an infinite loop causing a DoS (CVE-2005-1739).

The updated packages have been patched to fix these issues.

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:480 advisory.

    ImageMagick(TM) is an image display and manipulation tool for the X Window     System that can read and write multiple image formats.

    A denial of service bug was found in the way ImageMagick parses XWD files.
    A user or program executing ImageMagick to process a malicious XWD file can     cause ImageMagick to enter an infinite loop causing a denial of service     condition. The Common Vulnerabilities and Exposures project (cve.mitre.org)     has assigned the name CAN-2005-1739 to this issue.

    Users of ImageMagick should upgrade to these updated packages, which     contain a backported patch, and are not vulnerable to this issue.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-200505-16 (ImageMagick, GraphicsMagick: Denial of Service vulnerability)

    Tavis Ormandy of the Gentoo Linux Security Audit Team discovered a     Denial of Service vulnerability in the XWD decoder of ImageMagick and     GraphicsMagick when setting a color mask to zero.
  Impact :

    A remote attacker could submit a specially crafted image to a user or     an automated system making use of an affected utility, resulting in a     Denial of Service by consumption of CPU time.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
21831	CentOS 3 / 4 : ImageMagick (CESA-2005:480)	Nessus	CentOS Local Security Checks	medium
18584	Mandrake Linux Security Advisory : ImageMagick (MDKSA-2005:107)	Nessus	Mandriva Local Security Checks	medium
18422	RHEL 4 : ImageMagick (RHSA-2005:480)	Nessus	Red Hat Local Security Checks	medium
18380	GLSA-200505-16 : ImageMagick, GraphicsMagick: Denial of Service vulnerability	Nessus	Gentoo Local Security Checks	medium

Detections

Analytics

CVE-2005-1739

medium

Tenable Plugins

medium

medium

medium

medium