ImageMagick contains a flaw that may allow a heap overflow triggering a denial of service. The issue is triggered due to a lack of bounds checking in the ReadPNMImage() function when decoding PNM images, and will result in loss of availability for the application.
Classification
Location:
Remote / Network Access
Attack Type:
Denial of Service,
Input Manipulation
Impact:
Loss of Integrity,
Loss of Availability
Exploit:
Exploit Public
Solution
Upgrade ImageMagick to version 6.2.2 or higher, and GraphicsMagick to version 1.1.6 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
overflow.pl -
