The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted comment in a GIF image.

The remote host is affected by the vulnerability described in GLSA-201405-09 (ImageMagick: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in ImageMagick. Please       review the CVE identifiers referenced below for details.
    Note that CVE-2012-1185 and CVE-2012-1186 were issued due to incomplete       fixes for CVE-2012-0247 and CVE-2012-0248, respectively. The earlier CVEs       were addressed in GLSA 201203-09.
  Impact :

    A remote attacker can utilize multiple vectors to execute arbitrary code       or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote Windows host is running a version of ImageMagick prior to version 6.7.8-8.  It is, therefore, affected by a memory corruption vulnerability in 'gif.c' while processing GIF comments because a null character is used to terminate comments.  Exploitation of this issue could result in a denial of service or arbitrary code execution.  To fix this issue, raw memory handling is replaced with a 'ConcatenateString' function.

It was discovered that ImageMagick incorrectly handled decoding GIF image comments. If a user or automated system using ImageMagick were tricked into opening a specially crafted GIF image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Anton Kortunov reported a heap corruption in ImageMagick, a program collection and library for converting and manipulating image files.
Crafted GIF files could cause ImageMagick to crash, potentially leading to arbitrary code execution.

The oldstable distribution (squeeze) is not affected by this problem.

ID	Name	Product	Family	Severity
74052	GLSA-201405-09 : ImageMagick: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
70739	ImageMagick < 6.7.8-8 gif.c Memory Corruption	Nessus	Windows	medium
69843	Ubuntu 12.10 / 13.04 : imagemagick vulnerability (USN-1949-1)	Nessus	Ubuntu Local Security Checks	medium
69780	Debian DSA-2750-1 : imagemagick - buffer overflow	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2013-4298

medium

Tenable Plugins

high

medium

medium

medium