ImageMagick Integer Overflow Vulnerability in Sun Decoder Leading to Heap Overflow

A vulnerability allowing integer overflow has been identified in the sun decoder of ImageMagick, specifically in 32-bit systems and builds. This vulnerability can be exploited by using a carefully crafted image, which leads to an out-of-bounds write in the heap. Versions prior to 7.1.2-15 and 6.9.13-40 are affected, while the mentioned versions contain a patch.

Impact

Exploitation of this vulnerability causes a heap-buffer overflow, which can lead to memory corruption and potentially allow for arbitrary code execution.

Remediation

Users can upgrade to ImageMagick versions 7.1.2-15 or 6.9.13-40 to address this vulnerability.