FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

ImageMagick -- PSD handler heap overflow vulnerability

Affected packages
ImageMagick < 6.1.8.8
ImageMagick-nox11 < 6.1.8.8

Details

VuXML ID 597e2bee-68ea-11d9-a9e7-0001020eed82
Discovery 2004-12-21
Entry 2005-01-18

An iDEFENSE Security Advisory reports:

Remote exploitation of a buffer overflow vulnerability in The ImageMagick's Project's ImageMagick PSD image-decoding module could allow an attacker to execute arbitrary code.

Exploitation may allow attackers to run arbitrary code on a victim's computer if the victim opens a specially formatted image. Such images could be delivered by e-mail or HTML, in some cases, and would likely not raise suspicion on the victim's part. Exploitation is also possible when a web-based application uses ImageMagick to process user-uploaded image files.

References

CVE Name CVE-2005-0005
URL http://www.idefense.com/application/poi/display?id=184&type=vulnerabilities