[1/5] GraphicsMagick Insecure File Extension Processing
:A security issue has been reported in GraphicsMagick, which can be exploited by malicious people to bypass certain security restrictions.The security issue is caused due to the improper processing of file extensions and can be exploited to e.g. access X11 or to invoke certain delegate programs.Successful exploitation requires that a user is tricked into processing a malicious file with a specific file extension.The security issue is reported in versions prior to 1.1.12.Solution:Update to version 1.1.12 or later.Provided and/or discovered by:Reported by the vendor.Original Advisory:http://sourceforge.net/project/shownotes.php?release_id=595544
Original post by kapil
Posted in Advisories - Exploits |
| [1/5] GraphicsMagick Insecure File Extension Processing