CVE-2009-1882

Publication date 2 June 2009

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF file, which triggers a buffer overflow. NOTE: some of these details are obtained from third party information.

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
graphicsmagick 11.10 oneiric
Not affected
11.04 natty
Not affected
10.10 maverick
Not affected
10.04 LTS lucid
Not affected
9.10 karmic
Not affected
9.04 jaunty
Fixed 1.1.11-3.2+lenny1build0.9.04.1
8.10 intrepid Ignored end of life, was needed
8.04 LTS hardy Ignored end of life
6.06 LTS dapper Not in release
imagemagick 11.10 oneiric
Fixed 7:6.4.5.4.dfsg1-1ubuntu4
11.04 natty
Fixed 7:6.4.5.4.dfsg1-1ubuntu4
10.10 maverick
Fixed 7:6.4.5.4.dfsg1-1ubuntu4
10.04 LTS lucid
Fixed 7:6.4.5.4.dfsg1-1ubuntu4
9.10 karmic
Fixed 7:6.4.5.4.dfsg1-1ubuntu4
9.04 jaunty
Fixed 7:6.4.5.4.dfsg1-1ubuntu3.1
8.10 intrepid
Fixed 7:6.3.7.9.dfsg1-2ubuntu3.1
8.04 LTS hardy
Fixed 7:6.3.7.9.dfsg1-2ubuntu1.1
6.06 LTS dapper
Fixed 6:6.2.4.5-0.6ubuntu0.9

Notes

jdstrand

patch is from svn commit r513 in trunk (but has extra stuff that is unrelated)

References

Related Ubuntu Security Notices (USN)

    • USN-784-1
    • ImageMagick vulnerability
    • 8 June 2009

Other references