PT-2006-4985 · Imagemagick+1 · Imagemagick+1

Publicado 2006-08-15 · Atualizado 2018-10-17 · CVE-2006-4144

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.2.9

Description The issue is related to an integer overflow in the ReadSGIImage function in sgi.c, which can be triggered by large values of bytes per pixel, columns, and rows. This can cause a denial of service (crash) and potentially allow the execution of arbitrary code via a heap-based buffer overflow.

Recommendations For versions prior to 6.2.9, update to version 6.2.9 or later to resolve the issue. As a temporary workaround, consider restricting the input values for bytes per pixel, columns, and rows to prevent large values from being processed.

Exploit

Correção

Identificadores relacionados

CVE-2006-4144

DSA-1213

RHSA-2006:0633

RHSA-2006_0633

Produtos afetados

Imagemagick

Red Hat

Referências · 34

• 🔥 https://exploit-db.com/exploits/28383 · Exploit
• 🔥 http://securityfocus.com/bid/19507 · Exploit
• 🔥 http://overflow.pl/adv/imsgiheap.txt · Exploit
• ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2006-4144 · Aviso do Fabricante
• http://secunia.com/advisories/22096 · Nota
• http://securityfocus.com/archive/1/443362/100/0/threaded · Nota
• http://securityfocus.com/archive/1/443208/100/0/threaded · Nota
• http://debian.org/security/2006/dsa-1213 · Aviso do Fabricante
• http://secunia.com/advisories/21832 · Nota
• https://access.redhat.com/security/cve/CVE-2006-3744 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28372 · Nota
• http://securityreason.com/securityalert/1385 · Nota
• http://secunia.com/advisories/21462 · Aviso do Fabricante
• http://secunia.com/advisories/21621 · Nota