The host is installed with ImageMagick and is prone to integer overflow Vulnerability.

Successful exploitation will allow a context-dependent attacker to cause denial of service condition or potentially execute arbitrary code. Impact Level: Application/System

Upgrade to ImageMagick version 6.7.5-1 or later. http://www.imagemagick.org/script/download.php

Integer overflow error occurs due to an improper sanitation of user supplied input when computing the sum of 'number_bytes' and 'offset' in magick/profile.c or magick/property.c with a specially crafted request.

ImageMagick version 6.7.5 and earlier on Windows.

• http://www.openwall.com/lists/oss-security/2012/03/19/5
• http://www.osvdb.com/80556
• http://xforce.iss.net/xforce/xfdb/76140

---

Updated on 2015-03-25