1. Ubuntu Security Notices
  2. USN-422-1

USN-422-1: ImageMagick vulnerabilities

Publication date

15 February 2007

Overview

ImageMagick vulnerabilities

Releases

Details

Vladimir Nadvornik discovered that the fix for CVE-2006-5456, released
in USN-372-1, did not correctly solve the original flaw in PALM image
handling. By tricking a user into processing a specially crafted image
with an application that uses imagemagick, an attacker could execute
arbitrary code with the user’s privileges.

Vladimir Nadvornik discovered that the fix for CVE-2006-5456, released
in USN-372-1, did not correctly solve the original flaw in PALM image
handling. By tricking a user into processing a specially crafted image
with an application that uses imagemagick, an attacker could execute
arbitrary code with the user’s privileges.

Update instructions

In general, a standard system upgrade is sufficient to effect the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
6.10 edgy libmagick9 –  7:6.2.4.5.dfsg1-0.10ubuntu0.2
6.06 dapper libmagick9 –  6:6.2.4.5-0.6ubuntu0.5
5.10 breezy libmagick6 –  6:6.2.3.4-1ubuntu1.6

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Have additional questions?

Talk to a member of the team ›