PT-2006-6174 · Imagemagick+2 · Imagemagick+2

Lubomir Kundrak + 1 · Published 2006-10-23 · Updated 2024-06-15 · CVE-2006-5456

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GraphicsMagick versions prior to 1.1.7 ImageMagick versions prior to 6.0.7

Description The issue is related to multiple buffer overflows that can be triggered by user-assisted attacks, potentially leading to a denial of service and possibly the execution of arbitrary code. This can occur through the processing of certain image types, specifically DCM images handled by the ReadDCMImage function in coders/dcm.c, or PALM images handled by the ReadPALMImage function in coders/palm.c.

Recommendations For GraphicsMagick versions prior to 1.1.7, update to version 1.1.7 or later. For ImageMagick versions prior to 6.0.7, update to version 6.0.7 or later.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2006-5456

DSA-1213

OPENSUSE-SU-2024:10596-1

OPENSUSE-SU-2024:10597-1

RHSA-2007:0015

RHSA-2007_0015

Affected Products

Graphicsmagick

Imagemagick

Red Hat

References · 68

• https://nvd.nist.gov/vuln/detail/CVE-2006-5456 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10597-1 · Vendor Advisory
• http://secunia.com/advisories/22834 · Vendor Advisory
• http://secunia.com/advisories/23121 · Vendor Advisory
• http://debian.org/security/2006/dsa-1213 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-5456 · Vendor Advisory
• http://secunia.com/advisories/23090 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10596-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-5456 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_66_imagemagick.html · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc · Vendor Advisory
• http://vupen.com/english/advisories/2006/4170 · Vendor Advisory
• http://secunia.com/advisories/22569 · Vendor Advisory
• http://secunia.com/advisories/22572 · Vendor Advisory
• http://secunia.com/advisories/22998 · Vendor Advisory