Gentoo Security Advisory: ImageMagick sun/xcf decoders Heap/Stack Overflow (CVE-2006-3743/4)

Vulnerability Key Information Bug ID: Bug 144854 CVE ID: CVE-2006-374(3 Status: RESOLVED DUPLICATE of bug 143533 Reported Time: 2006-08-23 06:43 UTC Reporter: Tavis Ormandy (RETIRED) Last Modified: 2006-08-31 08:19 UTC Vulnerability Details Product: Gentoo Security Component: Vulnerabilities Severity: High normal Affected Files: , Vulnerability Description 1. Sun Bitmap Decoder: - Multiple heap buffer overflows exist due to lack of boundary checking and arithmetic operations on attacker-supplied values. - The routine in at line ~170 lacks boundary checks for internal loop decoding, allowing attackers to overflow the target buffer using run-length encoded payloads. - in at line ~206 performs arithmetic operations without boundary checks, leading to heap overflow. 2. XCF "GIMP Image" Decoder: - Multiple buffer overflows exist, including heap and stack overflows. - Stack overflow occurs in at line ~1097, where a 1000-byte stack buffer receives a string of attacker-specified length. Attachments (imagemagick-sun-raster-demo.bmp) (imagemagick-xcf-codex-demo.jpg) (imagemagick-6.2.8-goo-sec.diff) Notes Do not mark vulnerabilities before logging in. The Security Team is responsible for handling and stabilizing vulnerabilities.

Goal Reached Thanks to every supporter — we hit 100%!

Gentoo Security Advisory: ImageMagick sun/xcf decoders Heap/Stack Overflow (CVE-2006-3743/4)