ImageMagick和GraphicsMagick XWD解码器拒绝服务漏洞

漏洞信息详情

ImageMagick和GraphicsMagick XWD解码器拒绝服务漏洞

• CNNVD编号：CNNVD-200505-1171
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2005-1739
  
• 漏洞类型：
  
  
  其他
  
• 发布时间：
  
  2005-05-24
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  graphicsmagick
• 漏洞来源：
  Tavis Ormandy of t…

ImageMagick的6.2.2.3之前版本和GraphicsMagick的1.1.6-r1之前版本中的XWD解码器允许远程攻击者通过一个带有零颜色遮罩的图片来发起拒绝服务攻击(无限循环)。

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

RedHat Fedora Core2

Fedora ImageMagick-6.2.0.7-2.fc2.4.legacy.i386.rpm

RedHat Fedora Core 2

http://download.fedoralegacy.org/fedora/2/updates/i386/ImageMagick-6.2 .0.7-2.fc2.4.legacy.i386.rpm

Fedora ImageMagick-c++-6.2.0.7-2.fc2.4.legacy.i386.rpm

RedHat Fedora Core 2

http://download.fedoralegacy.org/fedora/2/updates/i386/ImageMagick-c++ -6.2.0.7-2.fc2.4.legacy.i386.rpm

Fedora ImageMagick-c++-devel-6.2.0.7-2.fc2.4.legacy.i386.rpm

RedHat Fedora Core 2

http://download.fedoralegacy.org/fedora/2/updates/i386/ImageMagick-c++ -devel-6.2.0.7-2.fc2.4.legacy.i386.rpm

Fedora ImageMagick-devel-6.2.0.7-2.fc2.4.legacy.i386.rpm

RedHat Fedora Core 2

http://download.fedoralegacy.org/fedora/2/updates/i386/ImageMagick-dev el-6.2.0.7-2.fc2.4.legacy.i386.rpm

Fedora ImageMagick-perl-6.2.0.7-2.fc2.4.legacy.i386.rpm

RedHat Fedora Core 2

http://download.fedoralegacy.org/fedora/2/updates/i386/ImageMagick-per l-6.2.0.7-2.fc2.4.legacy.i386.rpm

RedHat Fedora Core1

Fedora ImageMagick-5.5.6-13.legacy.i386.rpm

RedHat Fedora Core 1

http://download.fedoralegacy.org/fedora/1/updates/i386/ImageMagick-5.5 .6-13.legacy.i386.rpm

Fedora ImageMagick-c++-5.5.6-13.legacy.i386.rpm

RedHat Fedora Core 1

http://download.fedoralegacy.org/fedora/1/updates/i386/ImageMagick-c++ -5.5.6-13.legacy.i386.rpm

Fedora ImageMagick-c++-devel-5.5.6-13.legacy.i386.rpm

RedHat Fedora Core 1

http://download.fedoralegacy.org/fedora/1/updates/i386/ImageMagick-c++ -devel-5.5.6-13.legacy.i386.rpm

Fedora ImageMagick-devel-5.5.6-13.legacy.i386.rpm

RedHat Fedora Core 1

http://download.fedoralegacy.org/fedora/1/updates/i386/ImageMagick-dev el-5.5.6-13.legacy.i386.rpm

Fedora ImageMagick-perl-5.5.6-13.legacy.i386.rpm

RedHat Fedora Core 1

http://download.fedoralegacy.org/fedora/1/updates/i386/ImageMagick-per l-5.5.6-13.legacy.i386.rpm

ImageMagick ImageMagick 5.3.3

ImageMagick ImageMagick 6.0

http://www.imagemagick.org/script/download.php?

TurboLinux ImageMagick-5.3.3-5.i586.rpm

ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/upd ates/RPMS/ImageMagick-5.3.3-5.i586.rpm

TurboLinux ImageMagick-5.3.3-5.i586.rpm

ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/ 7/updates/RPMS/ImageMagick-5.3.3-5.i586.rpm

TurboLinux ImageMagick-5.3.3-6.i586.rpm

ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/upd ates/RPMS/ImageMagick-5.3.3-6.i586.rpm

TurboLinux ImageMagick-5.3.3-6.i586.rpm

ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/ 7/updates/RPMS/ImageMagick-5.3.3-6.i586.rpm

TurboLinux ImageMagick-devel-5.3.3-5.i586.rpm

ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/upd ates/RPMS/ImageMagick-devel-5.3.3-5.i586.rpm

TurboLinux ImageMagick-devel-5.3.3-5.i586.rpm

ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/ 7/updates/RPMS/ImageMagick-devel-5.3.3-5.i586.rpm

TurboLinux ImageMagick-devel-5.3.3-6.i586.rpm

ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/upd ates/RPMS/ImageMagick-devel-5.3.3-6.i586.rpm

ImageMagick ImageMagick 5.3.8

ImageMagick ImageMagick 6.0

http://www.imagemagick.org/script/download.php?

ImageMagick ImageMagick 5.4.3

ImageMagick ImageMagick 6.0

http://www.imagemagick.org/script/download.php?

TurboLinux ImageMagick-5.4.3-4.i586.rpm

ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/ 8/updates/RPMS/ImageMagick-5.4.3-4.i586.rpm

TurboLinux ImageMagick-5.4.3-5.i586.rpm

ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/ 8/updates/RPMS/ImageMagick-5.4.3-5.i586.rpm

TurboLinux ImageMagick-devel-5.4.3-4.i586.rpm

ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/ 8/updates/RPMS/ImageMagick-devel-5.4.3-4.i586.rpm

TurboLinux ImageMagick-devel-5.4.3-5.i586.rpm

ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/ 8/updates/RPMS/ImageMagick-devel-5.4.3-5.i586.rpm

ImageMagick ImageMagick 5.4.4 .5

Debian imagemagick_5.4.4.5-1woody6_alpha.deb

Debian GNU/Linux 3.0 alias woody

http://security.debian.org/pool/up

来源: UBUNTU

名称: USN-132-1

链接:http://www.ubuntulinux.org/support/documentation/usn/usn-132-1

来源: BID

名称: 13705

链接:http://www.securityfocus.com/bid/13705

来源: OSVDB

名称: 16775

链接:http://www.osvdb.org/16775

来源: OSVDB

名称: 16774

链接:http://www.osvdb.org/16774

来源: GENTOO

名称: GLSA-200505-16

链接:http://security.gentoo.org/glsa/glsa-200505-16.xml

来源: SECUNIA

名称: 15446

链接:http://secunia.com/advisories/15446

来源: SECUNIA

名称: 15429

链接:http://secunia.com/advisories/15429

来源: MISC

链接:http://bugs.gentoo.org/show_bug.cgi?id=90423

来源: REDHAT

名称: RHSA-2005:480

链接:http://www.redhat.com/support/errata/RHSA-2005-480.html

来源: MANDRAKE

名称: MDKSA-2005:107

链接:http://www.mandriva.com/security/advisories?name=MDKSA-2005:107

来源: SECUNIA

名称: 15453

链接:http://secunia.com/advisories/15453

来源: US Government Resource: oval:org.mitre.oval:def:960

名称: oval:org.mitre.oval:def:960

链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:960