National Cyber Awareness System

Vulnerability Summary for CVE-2005-1739

Overview

The XWD Decoder in ImageMagick before 6.2.2.3, and GraphicsMagick before 1.1.6-r1, allows remote attackers to cause a denial of service (infinite loop) via an image with a zero color mask.

Impact

CVSS Severity (version 2.0 incomplete approximation):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: UBUNTU

Name: USN-132-1

Type: Patch Information

Hyperlink:http://www.ubuntulinux.org/support/documentation/usn/usn-132-1

External Source: BID

Name: 13705

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/13705

External Source: OSVDB

Name: 16775

Hyperlink:http://www.osvdb.org/16775

External Source: OSVDB

Name: 16774

Hyperlink:http://www.osvdb.org/16774

External Source: GENTOO

Name: GLSA-200505-16

Hyperlink:http://security.gentoo.org/glsa/glsa-200505-16.xml

External Source: SECUNIA

Name: 15446

Hyperlink:http://secunia.com/advisories/15446

External Source: SECUNIA

Name: 15429

Type: Advisory

Hyperlink:http://secunia.com/advisories/15429

External Source: OVAL

Name: oval:org.mitre.oval:def:11667

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11667

External Source: MISC

Name: http://bugs.gentoo.org/show_bug.cgi?id=90423

Hyperlink:http://bugs.gentoo.org/show_bug.cgi?id=90423

External Source: REDHAT

Name: RHSA-2005:480

Hyperlink:http://www.redhat.com/support/errata/RHSA-2005-480.html

External Source: MANDRAKE

Name: MDKSA-2005:107

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2005:107

External Source: SECUNIA

Name: 15453

Hyperlink:http://secunia.com/advisories/15453

US Government Resource: oval:org.mitre.oval:def:960

Name: oval:org.mitre.oval:def:960

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:960

References to Check Content

Identifier:oval:org.mitre.oval:def:11667

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:11667

Identifier:oval:org.mitre.oval:def:960

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:960