PT-2006-6538 · Imagemagick+1 · Imagemagick+1

Daniel Kobras · Published 2006-11-22 · Updated 2018-10-17 · CVE-2006-5868

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Imagemagick versions 6.0 before 6.0.6.2 Imagemagick versions 6.2 before 6.2.4.5

Description The issue concerns multiple buffer overflows in Imagemagick, which can be triggered via crafted SGI images. The impact and attack vectors of this issue are user-assisted.

Recommendations For Imagemagick versions 6.0 before 6.0.6.2, update to version 6.0.6.2 or later. For Imagemagick versions 6.2 before 6.2.4.5, update to version 6.2.4.5 or later.

Fix

Related Identifiers

CVE-2006-5868

DSA-1213

RHSA-2007:0015

RHSA-2007_0015

Affected Products

Imagemagick

Red Hat

References · 20

• https://osv.dev/vulnerability/CVE-2006-5868 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5868 · Security Note
• http://debian.org/security/2006/dsa-1213 · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:223 · Vendor Advisory
• http://ubuntu.com/usn/usn-386-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-5868 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-5868 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0015.html · Vendor Advisory
• http://secunia.com/advisories/24284 · Note
• http://secunia.com/advisories/23101 · Note
• https://access.redhat.com/errata/RHSA-2007:0015 · Note
• http://secunia.com/advisories/23219 · Note
• https://access.redhat.com/security/cve/CVE-2006-2440 · Note
• http://securityfocus.com/bid/21185 · Note