Executive Summary

Informations
Name	CVE-2005-0005	First vendor Publication	2005-05-02
Vendor	Cve	Last vendor Modification	2010-08-21

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Security Protection

Impacts

Provides user account access : Allows partial confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service.

Detail

Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0005

OVAL Definitions

 

Definition Id: oval:org.mitre.oval:def:9925
Oval ID:	oval:org.mitre.oval:def:9925
Title:	Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to execute arbitrary code by causing an error via a javascript: URI call to document.write in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters.
Description:	Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2005-0005	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section ImageMagick-c++-devel is earlier than 0:5.5.6-13 AND ImageMagick is earlier than 0:5.5.6-13 AND ImageMagick-perl is earlier than 0:5.5.6-13 AND ImageMagick-devel is earlier than 0:5.5.6-13 AND ImageMagick-c++ is earlier than 0:5.5.6-13 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section ImageMagick-c++-devel is earlier than 0:6.0.7.1-6 AND ImageMagick is earlier than 0:6.0.7.1-6 AND ImageMagick-perl is earlier than 0:6.0.7.1-6 AND ImageMagick-devel is earlier than 0:6.0.7.1-6 AND ImageMagick-c++ is earlier than 0:6.0.7.1-6

CPE : Common Platform Enumeration

Type	Description	Count
Application	Graphicsmagick Graphicsmagick cpe:/a:graphicsmagick:graphicsmagick:1.1.4 cpe:/a:graphicsmagick:graphicsmagick:1.1.3 cpe:/a:graphicsmagick:graphicsmagick:1.1 cpe:/a:graphicsmagick:graphicsmagick:1.0.6 cpe:/a:graphicsmagick:graphicsmagick:1.0	5
Application	Imagemagick Imagemagick cpe:/a:imagemagick:imagemagick:6.2.0.7 cpe:/a:imagemagick:imagemagick:6.2.0.4 cpe:/a:imagemagick:imagemagick:6.2 cpe:/a:imagemagick:imagemagick:6.1.7 cpe:/a:imagemagick:imagemagick:6.1.6 cpe:/a:imagemagick:imagemagick:6.1.5 cpe:/a:imagemagick:imagemagick:6.1.4 cpe:/a:imagemagick:imagemagick:6.1.3 cpe:/a:imagemagick:imagemagick:6.1.2 cpe:/a:imagemagick:imagemagick:6.1.1.6 cpe:/a:imagemagick:imagemagick:6.1 cpe:/a:imagemagick:imagemagick:6.0.8 cpe:/a:imagemagick:imagemagick:6.0.7 cpe:/a:imagemagick:imagemagick:6.0.6 cpe:/a:imagemagick:imagemagick:6.0.5 cpe:/a:imagemagick:imagemagick:6.0.4 cpe:/a:imagemagick:imagemagick:6.0.3 cpe:/a:imagemagick:imagemagick:6.0.2.5 cpe:/a:imagemagick:imagemagick:6.0.2 cpe:/a:imagemagick:imagemagick:6.0.1 cpe:/a:imagemagick:imagemagick:6.0 cpe:/a:imagemagick:imagemagick:5.4.7 cpe:/a:imagemagick:imagemagick:5.4.3 cpe:/a:imagemagick:imagemagick:5.3.3	24
Application	Sgi Propack cpe:/a:sgi:propack:3.0	1
Os	Debian Debian Linux cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::sparc cpe:/o:debian:debian_linux:3.0::hppa	11
Os	Gentoo Linux cpe:/o:gentoo:linux:1.4:rc3 cpe:/o:gentoo:linux:1.4:rc1 cpe:/o:gentoo:linux:1.4 cpe:/o:gentoo:linux:1.4:rc2 cpe:/o:gentoo:linux:1.2 cpe:/o:gentoo:linux:1.1a cpe:/o:gentoo:linux:0.7 cpe:/o:gentoo:linux:0.5	8
Os	Suse Suse Linux cpe:/o:suse:suse_linux:9.2 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.0::i386	8

Open Source Vulnerability Database (OSVDB)

id	Description
13028	ImageMagick PSD Image Decoding Module Overflow

Internal Sources (Detail)

Source	Url
BUGTRAQ	http://marc.theaimsgroup.com/?l=bugtraq&m=110608222117215&w=2
DEBIAN	http://www.debian.org/security/2005/dsa-646
GENTOO	http://www.gentoo.org/security/en/glsa/glsa-200501-37.xml
IDEFENSE	http://www.idefense.com/application/poi/display?id=184&type=vulnerabilities
REDHAT	http://www.redhat.com/support/errata/RHSA-2005-070.html http://www.redhat.com/support/errata/RHSA-2005-071.html

Alert History

Date	Informations
2013-05-11 11:19:26	Multiple Updates