| Package | Affected versions | Patched versions |
|---|---|---|
| imagemagick | = 6.3.0.0= 6.3.0.1= 6.3.0.2= 6.3.0.3= 6.3.0.4= 6.3.0.5= 6.3.0.7= 6.3.0.8= 6.3.1.0= 6.3.1.1= 6.3.1.2.= 6.3.1.3= 6.3.1.4= 6.3.1.5= 6.3.1.6= 6.3.1.7= 6.3.2.0= 6.3.2.1= 6.3.2.2= 6.3.2.3= 6.3.2.4= 6.3.2.5= 6.3.2.6= 6.3.2.7= 6.3.2.8= 6.3.3.0= 6.3.3.1= 6.3.3.2= 6.3.3.3= 6.3.3.4 |
Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which results in a heap-based overflow in the ReadXWDImage function, different issues than CVE-2007-1667.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free