ImageMagick Remote EXIF Parsing Buffer Overflow Vulnerability

BID:11548

Info

ImageMagick Remote EXIF Parsing Buffer Overflow Vulnerability

Bugtraq ID: 11548
Class: Boundary Condition Error
CVE: CVE-2004-0981
CVE-2004-0981
Remote: Yes
Local: No
Published: Oct 06 2004 12:00AM
Updated: Mar 05 2013 05:04PM
Credit: The individual responsible for the discovery of this issue is currently unknown; the vendor disclosed this issue.
Vulnerable: Xerox FreeFlow Print Server (FFPS) 73.C0.41
Xerox FreeFlow Print Server (FFPS) 73.B3.61
SuSE Linux 9.2
SuSE Linux 9.1
SuSE Linux 9
S.u.S.E. Linux Personal 9.2
S.u.S.E. Linux Personal 9.1
S.u.S.E. Linux Personal 9.0 x86_64
S.u.S.E. Linux Personal 9.0
S.u.S.E. Linux Personal 8.2
S.u.S.E. Linux 8.1
S.u.S.E. Linux 8.0
RedHat Linux 9.0 i386
RedHat Linux 7.3 i686
RedHat Linux 7.3 i386
RedHat Linux 7.3
Red Hat Fedora Core3
Red Hat Fedora Core2
Red Hat Fedora Core1
ImageMagick ImageMagick 6.0.8
ImageMagick ImageMagick 6.0.7
+ Red Hat Enterprise Linux AS 4
 + RedHat Desktop 4.0
+ RedHat Enterprise Linux Desktop version 4
 + RedHat Enterprise Linux ES 4
 + RedHat Enterprise Linux WS 4
 + S.u.S.E. Linux Personal 9.2 x86_64
 + S.u.S.E. Linux Personal 9.2
ImageMagick ImageMagick 6.0.6
+ Ubuntu Ubuntu Linux 5.0 4 powerpc
 + Ubuntu Ubuntu Linux 5.0 4 i386
 + Ubuntu Ubuntu Linux 5.0 4 amd64
 ImageMagick ImageMagick 6.0.5
+ Turbolinux Home
+ Turbolinux Turbolinux Desktop 10.0
+ Turbolinux Turbolinux Server 10.0
ImageMagick ImageMagick 6.0.4
+ Mandriva Linux Mandrake 10.1 x86_64
 + Mandriva Linux Mandrake 10.1
ImageMagick ImageMagick 6.0.3
ImageMagick ImageMagick 6.0.1
ImageMagick ImageMagick 6.0
ImageMagick ImageMagick 5.5.7
+ Mandriva Linux Mandrake 10.0 AMD64
 + Mandriva Linux Mandrake 10.0
+ Mandriva Linux Mandrake 9.2 amd64
 + Mandriva Linux Mandrake 9.2
+ S.u.S.E. Linux Personal 9.1 x86_64
 + S.u.S.E. Linux Personal 9.1
+ S.u.S.E. Linux Personal 9.0 x86_64
 + S.u.S.E. Linux Personal 9.0
ImageMagick ImageMagick 5.5.6 .0-20030409
+ OpenPKG OpenPKG Current
 ImageMagick ImageMagick 5.5.3 .2-1.2.0
+ OpenPKG OpenPKG 1.2
ImageMagick ImageMagick 5.4.8 .2-1.1.0
+ OpenPKG OpenPKG 1.1
ImageMagick ImageMagick 5.4.8
+ MandrakeSoft Corporate Server 2.1 x86_64
 + MandrakeSoft Corporate Server 2.1
ImageMagick ImageMagick 5.4.7
+ Turbolinux Turbolinux Server 8.0
ImageMagick ImageMagick 5.4.4 .5
+ Debian Linux 3.0 sparc
 + Debian Linux 3.0 s/390
 + Debian Linux 3.0 ppc
 + Debian Linux 3.0 mipsel
 + Debian Linux 3.0 mips
 + Debian Linux 3.0 m68k
 + Debian Linux 3.0 ia-64
 + Debian Linux 3.0 ia-32
 + Debian Linux 3.0 hppa
 + Debian Linux 3.0 arm
 + Debian Linux 3.0 alpha
 + Debian Linux 3.0
ImageMagick ImageMagick 5.4.3
+ Turbolinux Turbolinux Workstation 8.0
ImageMagick ImageMagick 5.3.3
+ Turbolinux Turbolinux Server 7.0
+ Turbolinux Turbolinux Workstation 7.0
Gentoo Linux
Debian Linux 3.0 sparc
Debian Linux 3.0 s/390
Debian Linux 3.0 ppc
Debian Linux 3.0 mipsel
Debian Linux 3.0 mips
Debian Linux 3.0 m68k
Debian Linux 3.0 ia-64
Debian Linux 3.0 ia-32
Debian Linux 3.0 hppa
Debian Linux 3.0 arm
Debian Linux 3.0 alpha
Not Vulnerable:

Discussion

ImageMagick Remote EXIF Parsing Buffer Overflow Vulnerability

A remote buffer overflow vulnerability reportedly affects the EXIF parsing functionality of ImageMagick. This issue is due to a failure of the application to carry out sufficient bounds checking prior to copying strings into process buffers.

An attacker may exploit this issue to execute arbitrary code on an affected computer with the privileges of the user that activated the vulnerable application, facilitating unauthorized access or privilege escalation.

Exploit / POC

ImageMagick Remote EXIF Parsing Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

ImageMagick Remote EXIF Parsing Buffer Overflow Vulnerability

Solution:
The vendor has released an upgrade dealing with this issue.

Red Hat has released an advisory (FEDORA-2005-221) and fixes to address this issue in Fedora Core 3. Please see the referenced advisory for further details regarding obtaining and applying an appropriate fix.

SuSE has released a security summary report (SUSE-SR:2004:001) to address this and other issues. The report indicates that a fix for this issue is available on the SuSE FTP server and also through the YaST Online Update utility. Customers are advised to peruse the referenced advisory for further details regarding obtaining and applying appropriate fixes.

SuSE has released advisory SUSE-SA:2004:041 mainly to address the vulnerabilities described in BID 11694. However, in the addendum of this advisory, it is reported that fixes for the issue described in this BID are now available on the SuSE update FTP server for download. Customers are advised to see the referenced advisory for further information regarding obtaining and applying appropriate updates.

Debian has released an advisory DSA 593-1 and updates to address this vulnerability. Please see the referenced advisory for further information.

Gentoo Linux has released advisory GLSA 200411-11:01 to address this issue in ImageMagick. Users of the affected package are urged to execute the following commands with superuser privileges to install the updates:

emerge --sync
emerge --ask --oneshot --verbose ">=media-gfx/imagemagick-6.1.3.2"

MandrakeSoft has issued an advisory (MDKSA-2004:143) along with patched upgrades. Please see the referenced advisory for more information.

Red Hat has released a Red Hat Enterprise Linux advisory (RHSA-2004:636-03) that includes an updated version of ImageMagick to address this issue. Please see the referenced advisory for more information.

TurboLinux has issued an advisory and fixes for TurboLinux Server and Desktop 10. See advisory TLSA-2005-7 in the reference section.

Ubuntu has released advisory USN-90-1 to address this issue. Please see the referenced advisory for more information.

Gentoo linux has released an advisory (GLSA 200503-11) dealing with this issue. Gentoo advises that all ImageMagick users should upgrade to the latest version by issuing the following commands with superuser privileges:

emerge --sync
emerge --ask --oneshot --verbose ">=media-gfx/imagemagick-6.2.0.4"

For more information please see the referenced Gentoo linux advisory.

Red Hat has released advisory RHSA-2005:320-10 and fixes to address this issue on Red Hat Linux Enterprise platforms. Customers who are affected by this issue are advised to apply the appropriate updates. Customers subscribed to the Red Hat Network may apply the appropriate fixes using the Red Hat Update Agent (up2date). Please see referenced advisory for additional information.

SuSE Linux has released an advisory (SUSE-SA:2005:017) dealing with this and other issues. Please see the referenced advisory for more information.

RedHat has released advisories FEDORA-2005-234 and FEDORA-2005-235 dealing with this issue in their Core 2 and Core 3 packages respectively. Please see the referenced advisory for more information.

RedHat Fedora Legacy has released security advisory FLSA:152777 addressing this issue for RedHat Linux 7.3 and 9.0, and for Fedora Core 1 and 2. Please see the referenced advisory for further information.


Red Hat Fedora Core2

Red Hat Fedora Core1

ImageMagick ImageMagick 5.3.3

ImageMagick ImageMagick 5.4.3

ImageMagick ImageMagick 5.4.4 .5

ImageMagick ImageMagick 5.4.7

ImageMagick ImageMagick 5.4.8 .2-1.1.0

ImageMagick ImageMagick 5.4.8

ImageMagick ImageMagick 5.5.3 .2-1.2.0

ImageMagick ImageMagick 5.5.6 .0-20030409

ImageMagick ImageMagick 5.5.7

ImageMagick ImageMagick 6.0

ImageMagick ImageMagick 6.0.1

ImageMagick ImageMagick 6.0.3

ImageMagick ImageMagick 6.0.4

ImageMagick ImageMagick 6.0.5

ImageMagick ImageMagick 6.0.6

ImageMagick ImageMagick 6.0.7

ImageMagick ImageMagick 6.0.8

RedHat Linux 7.3 i386

RedHat Linux 7.3 i686

RedHat Linux 7.3

RedHat Linux 9.0 i386

References

ImageMagick Remote EXIF Parsing Buffer Overflow Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report