The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation.

ImageMagick has been updated to fix an integer overflow (CVE-2012-3438).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

GraphicsMagick was updated to fix integer overflows in the _png_malloc functions (CVE-2012-3438).

ImageMagick has been updated to fix an integer overflow.
(CVE-2012-3438)

ImageMagick has been updated to fix an integer overflow.
(CVE-2012-3438)

Also a slowness in 'convert' when resizing JPEG images has been addressed. (bnc#754481)

A vulnerability has been found and corrected in graphicsmagick :

The Magick_png_malloc function in coders/png.c in GraphicsMagick 6.7.8-6 does not use the proper variable type for the allocation size, which might allow remote attackers to cause a denial of service (crash) via a crafted PNG file that triggers incorrect memory allocation (CVE-2012-3438).

The updated packages have been patched to correct this issue.

Kurt Seifried reports :

There is an issue in ImageMagick that is also present in GraphicsMagick. CVE-2011-3026 deals with libpng memory allocation, and limitations have been added so that a bad PNG can't cause the system to allocate a lot of memory and a denial of service. However on further investigation of ImageMagick, Tom Lane found that PNG malloc function (Magick_png_malloc) in turn calls AcquireMagickMemory with an improper size argument.

This update :

  - addresses a potential memory allocation issue with png     images

    - fixes a -devel multilib conflict

    - builds against lcms2

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
83582	SUSE SLED10 Security Update : ImageMagick (SUSE-SU-2013:0756-1)	Nessus	SuSE Local Security Checks	medium
74944	openSUSE Security Update : GraphicsMagick (openSUSE-SU-2013:0536-1)	Nessus	SuSE Local Security Checks	medium
66345	SuSE 10 Security Update : ImageMagick (ZYPP Patch Number 8512)	Nessus	SuSE Local Security Checks	medium
66343	SuSE 11.2 Security Update : ImageMagick (SAT Patch Number 7520)	Nessus	SuSE Local Security Checks	medium
62540	Mandriva Linux Security Advisory : graphicsmagick (MDVSA-2012:165)	Nessus	Mandriva Local Security Checks	medium
62298	FreeBSD : ImageMagick and GraphicsMagick -- DoS via specially crafted PNG file (98690c45-0361-11e2-a391-000c29033c32)	Nessus	FreeBSD Local Security Checks	medium
62136	Fedora 18 : GraphicsMagick-1.3.16-5.fc18 (2012-12333)	Nessus	Fedora Local Security Checks	medium
62018	Fedora 16 : GraphicsMagick-1.3.16-5.fc16 (2012-12366)	Nessus	Fedora Local Security Checks	medium
62017	Fedora 17 : GraphicsMagick-1.3.16-5.fc17 (2012-12352)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2012-3438

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium