CVE-2009-1882

Vulnerability

Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8 and GraphicsMagick (as confirmed in [3]) allows remote attackers to cause a buffer overflow via a specially crafted TIFF file. The overflow occurs when processing image dimensions, leading to undersized buffer allocation.

Exploitation

An attacker can exploit this by providing a malicious TIFF file to an application using ImageMagick or GraphicsMagick to process images. No authentication is required; the attack can be remote if the application accepts user-supplied images. The crafted TIFF triggers the integer overflow, resulting in a heap-based buffer overflow.

Impact

Successful exploitation can lead to denial of service (crash) and potentially arbitrary code execution with the privileges of the application processing the image. The vulnerability affects both ImageMagick and GraphicsMagick.

Mitigation

The fix was included in ImageMagick versions after 6.5.2-8. Users should upgrade to a patched version. For GraphicsMagick, the issue was addressed in subsequent releases. No workarounds are documented in the available references. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog.