What is the severity of USN-7-1?

USN-7-1 is considered a critical vulnerability due to the potential for arbitrary code execution through a buffer overflow.

How do I fix USN-7-1?

To fix USN-7-1, upgrade to ImageMagick version 6.1.0 or later to mitigate the vulnerability.

What products are affected by USN-7-1?

USN-7-1 affects ImageMagick versions prior to 6.1.0, specifically libmagick6 on affected Ubuntu systems.

How does the vulnerability in USN-7-1 occur?

The vulnerability in USN-7-1 occurs due to a buffer overflow in the EXIF parsing routine of ImageMagick when processing malicious image files.

Vulnerability/
USN-7-1

CWE

119

27/10/2004

USN-7-1: imagemagick vulnerability

Q: What are the risks associated with USN-7-1?

The primary risk associated with USN-7-1 is the execution of arbitrary code with the user's privileges, which could lead to system compromise.

First published: Wed Oct 27 2004(Updated: )

A buffer overflow in imagemagick's EXIF parsing routine has been discovered in imagemagick versions prior to 6.1.0. Trying to query EXIF information of a malicious image file might result in execution of arbitrary code with the user's privileges. Since imagemagick can be used in custom printing systems, this also might lead to privilege escalation (execute code with the printer spooler's privileges). However, Ubuntu's standard printing system does not use imagemagick, thus there is no risk of privilege escalation in a standard installation.

Affected Software	Affected Version	How to fix
All of
ubuntu/libmagick6	<
Ubuntu	=4.10

Never miss a vulnerability like this again

Reference Links

Child vulnerabilities

(Contains the following vulnerabilities)

CVE-2004-0981

Frequently Asked Questions

What is the severity of USN-7-1?
USN-7-1 is considered a critical vulnerability due to the potential for arbitrary code execution through a buffer overflow.
How do I fix USN-7-1?
To fix USN-7-1, upgrade to ImageMagick version 6.1.0 or later to mitigate the vulnerability.
What products are affected by USN-7-1?
USN-7-1 affects ImageMagick versions prior to 6.1.0, specifically libmagick6 on affected Ubuntu systems.
What are the risks associated with USN-7-1?
The primary risk associated with USN-7-1 is the execution of arbitrary code with the user's privileges, which could lead to system compromise.
How does the vulnerability in USN-7-1 occur?
The vulnerability in USN-7-1 occurs due to a buffer overflow in the EXIF parsing routine of ImageMagick when processing malicious image files.

agent/last-modified-date
agent/severity
agent/title
agent/weakness
agent/references
agent/type
agent/description
agent/first-publish-date
agent/event
agent/trending
agent/source
agent/softwarecombine
agent/tags
collector/usn
source/Ubuntu
anchor-related/USN-10-1
agent/software-canonical-lookup
agent/software-canonical-lookup-request
package-manager/ubuntu
vendor/ubuntu
canonical/ubuntu
version/ubuntu/4.10

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.