CVE-2005-0762
published 2005-05-02CVE-2005-0762: Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file.
PriorityP430high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
3.42%
87.7th percentile
Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file.
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | imagemagick | < imagemagick 5:6.0.0-1 (bookworm) | imagemagick 5:6.0.0-1 (bookworm) |
| imagemagick | imagemagick | — | — |
| imagemagick | imagemagick | — | — |
| imagemagick | imagemagick | — | — |
| imagemagick | imagemagick | — | — |
| imagemagick | imagemagick | — | — |
| imagemagick | imagemagick | — | — |
| imagemagick | imagemagick | — | — |
| imagemagick | imagemagick | — | — |
| imagemagick | imagemagick | — | — |
| imagemagick | imagemagick | — | — |
| imagemagick | imagemagick | — | — |
| imagemagick | imagemagick | — | — |
| imagemagick | imagemagick | — | — |
| imagemagick | imagemagick | — | — |
| imagemagick | imagemagick | >= 0 < 5:6.0.0-1 | 5:6.0.0-1 |
| imagemagick | imagemagick | >= 0 < 5:6.0.0-1 | 5:6.0.0-1 |
| imagemagick | imagemagick | >= 0 < 5:6.0.0-1 | 5:6.0.0-1 |
| imagemagick | imagemagick | >= 0 < 5:6.0.0-1 | 5:6.0.0-1 |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-5vp3-qfr9-9m96: Heap-based buffer overflow in the SGI parser in ImageMagick before 6
ghsa_unreviewed·2022-05-01
CVE-2005-0762 [HIGH] GHSA-5vp3-qfr9-9m96: Heap-based buffer overflow in the SGI parser in ImageMagick before 6
Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file.
OSV
CVE-2005-0762: Heap-based buffer overflow in the SGI parser in ImageMagick before 6
osv·2005-05-02·CVSS 7.5
CVE-2005-0762 [HIGH] CVE-2005-0762: Heap-based buffer overflow in the SGI parser in ImageMagick before 6
Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file.
Debian
CVE-2005-0762: imagemagick - Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows re...
vendor_debian·2005·CVSS 7.5
CVE-2005-0762 [HIGH] CVE-2005-0762: imagemagick - Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows re...
Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file.
Scope: local
bookworm: resolved (fixed in 5:6.0.0-1)
bullseye: resolved (fixed in 5:6.0.0-1)
forky: resolved (fixed in 5:6.0.0-1)
sid: resolved (fixed in 5:6.0.0-1)
trixie: resolved (fixed in 5:6.0.0-1)
Red Hat
security flaw
vendor_redhat·2004-06-09·CVSS 7.5
CVE-2005-0762 [HIGH] security flaw
security flaw
Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file.
No detection rules found.
No public exploits indexed.
http://rhn.redhat.com/errata/RHSA-2005-070.htmlhttp://securitytracker.com/id?1013550http://www.debian.org/security/2005/dsa-702http://www.novell.com/linux/security/advisories/2005_17_imagemagick.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9736http://rhn.redhat.com/errata/RHSA-2005-070.htmlhttp://securitytracker.com/id?1013550http://www.debian.org/security/2005/dsa-702http://www.novell.com/linux/security/advisories/2005_17_imagemagick.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9736
2005-05-02
Published