PT-2006-6538 · Imagemagick+1 · Imagemagick+1

Daniel Kobras · Publicado 2006-11-22 · Atualizado 2018-10-17 · CVE-2006-5868

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Imagemagick versions 6.0 before 6.0.6.2 Imagemagick versions 6.2 before 6.2.4.5

Description The issue concerns multiple buffer overflows in Imagemagick, which can be triggered via crafted SGI images. The impact and attack vectors of this issue are user-assisted.

Recommendations For Imagemagick versions 6.0 before 6.0.6.2, update to version 6.0.6.2 or later. For Imagemagick versions 6.2 before 6.2.4.5, update to version 6.2.4.5 or later.

Correção

Identificadores relacionados

CVE-2006-5868

DSA-1213

RHSA-2007:0015

RHSA-2007_0015

Produtos afetados

Imagemagick

Red Hat

Referências · 20

• https://osv.dev/vulnerability/CVE-2006-5868 · Aviso do Fabricante
• http://secunia.com/advisories/24284 · Nota
• http://secunia.com/advisories/23101 · Nota
• https://access.redhat.com/errata/RHSA-2007:0015 · Nota
• http://secunia.com/advisories/23219 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5868 · Nota de Segurança
• http://debian.org/security/2006/dsa-1213 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2006-2440 · Nota
• ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc · Aviso do Fabricante
• http://securityfocus.com/bid/21185 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2006:223 · Aviso do Fabricante
• http://ubuntu.com/usn/usn-386-1 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2006-5868 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10612 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-5868 · Aviso do Fabricante