Detections
Analytics

FreeBSD : ImageMagick -- PSD handler heap overflow vulnerability (597e2bee-68ea-11d9-a9e7-0001020eed82)

high Nessus Plugin ID 18944

Synopsis

The remote FreeBSD host is missing one or more security-related updates.

Description

An iDEFENSE Security Advisory reports :

Remote exploitation of a buffer overflow vulnerability in The ImageMagick's Project's ImageMagick PSD image-decoding module could allow an attacker to execute arbitrary code.

Exploitation may allow attackers to run arbitrary code on a victim's computer if the victim opens a specially formatted image. Such images could be delivered by e-mail or HTML, in some cases, and would likely not raise suspicion on the victim's part. Exploitation is also possible when a web-based application uses ImageMagick to process user-uploaded image files.

Solution

Update the affected packages.

See Also

http://www.nessus.org/u?391d21e7

http://www.nessus.org/u?ba5570be

Plugin Details

Severity: High

ID: 18944

File Name: freebsd_pkg_597e2bee68ea11d9a9e70001020eed82.nasl

Version: 1.18

Type: local

Published: 7/13/2005

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:imagemagick, p-cpe:/a:freebsd:freebsd:imagemagick-nox11, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 1/18/2005

Vulnerability Publication Date: 12/21/2004

Reference Information

CVE: CVE-2005-0005