Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

USN-681-1: ImageMagick vulnerability

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-681-1: ImageMagick vulnerability
# 1  
Old 12-01-2008
USN-681-1: ImageMagick vulnerability
Referenced CVEs:
CVE-2008-1096


Description:
=========================================================== Ubuntu Security Notice USN-681-1 December 01, 2008 imagemagick vulnerability CVE-2008-1096 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 7.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: imagemagick 6:6.2.4.5-0.6ubuntu0.8 Ubuntu 7.10: imagemagick 7:6.2.4.5.dfsg1-2ubuntu1.1 After a standard system upgrade you need to restart any applications that use ImageMagick, such as OpenOffice.org and Inkscape, to effect the necessary changes. Details follow: It was discovered that ImageMagick did not correctly handle certain malformed XCF images. If a user were tricked into opening a specially crafted image with an application that uses ImageMagick, an attacker could cause a denial of service and possibly execute arbitrary code with the user's privileges.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT CENTOS

conjure

conjure(1)						      General Commands Manual							conjure(1)

NAME

       conjure - interprets and executes scripts written in the Magick Scripting Language (MSL).

SYNOPSIS

       conjure [options] script.msl

OVERVIEW

       The conjure program is a member of the ImageMagick(1) suite of tools.  Use it to process a Magick Scripting Language (MSL) script. The Mag-
       ick scripting language (MSL) will primarily benefit those that want to accomplish custom image processing tasks but do not wish to program,
       or those that do not have access to a Perl interpreter or a compiler.

       For  more  information  about  the  conjure  command,  point  your  browser  to file:///usr/share/doc/ImageMagick-6.7.8/www/conjure.html or
       http://www.imagemagick.org/script/conjure.php.

DESCRIPTION

       Image Settings:
	 -monitor	      monitor progress
	 -quiet 	      suppress all warning messages
	 -regard-warnings     pay attention to warning messages
	 -seed value	      seed a new sequence of pseudo-random numbers
	 -verbose	      print detailed information about the image

       Miscellaneous Options:
	 -debug events	      display copious debugging information
	 -help		      print program options
	 -log format	      format of debugging information
	 -list type	      print a list of supported option arguments
	 -version	      print version information

       In additiion, define any key value pairs required by your script.  For example,

	   conjure -size 100x100 -color blue -foo bar script.msl

SEE ALSO

       ImageMagick(1)

COPYRIGHT

       Copyright   (C)	 1999-2012   ImageMagick   Studio   LLC.   Additional	copyrights   and   licenses   apply   to   this   software,    see
       file:///usr/share/doc/ImageMagick-6.7.8/www/license.html or http://www.imagemagick.org/script/license.php

ImageMagick						     Date: 2009/01/10 01:00:00							conjure(1)