Mandriva Linux Security Advisory MDKSA-2006-155 – Multiple buffer overflows in ImageMagick before 6.2.9 allow user-assisted attackers to execute arbitrary code via crafted XCF images. Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun bitmap images that trigger heap-based buffer overflows. An integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large bytes_per_pixel, columns, and rows values, which trigger a heap-based buffer overflow.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49550/MDKSA-2006-155.txt
Source: https://packetstormsecurity.com/files/49550/Mandriva-Linux-Security-Advisory-2006.155.html