CVE-2006-5868Improper Restriction of Operations within the Bounds of a Memory Buffer in Imagemagick

8 documents7 sources
Severity
9.3CRITICALNVD
EPSS
1.5%
top 19.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedNov 22
Latest updateMay 3

Description

Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assisted attack vectors via a crafted SGI image.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

debiandebian/imagemagick< imagemagick 7:6.2.4.5.dfsg1-0.11 (bookworm)
NVDimagemagick/imagemagick6.06.0.6.2+1
Debianimagemagick/imagemagick< 7:6.2.4.5.dfsg1-0.11+3

Also affects: Debian Linux 3.1, 4.0, Ubuntu Linux 5.10, 6.06

🔴Vulnerability Details

2
GHSA
GHSA-rq9g-h4j2-r538: Multiple buffer overflows in Imagemagick 62022-05-03
OSV
CVE-2006-5868: Multiple buffer overflows in Imagemagick 62006-11-22

📋Vendor Advisories

3
Ubuntu
ImageMagick vulnerability2006-11-28
Red Hat
Insufficient boundary check in ImageMagick's SGIDecode()2006-09-29
Debian
CVE-2006-5868: imagemagick - Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2....2006

💬Community

2
Bugzilla
CVE-2006-5868 Insufficient boundary check in ImageMagick's SGIDecode()2006-11-28
Bugzilla
CVE-2006-5868 Insufficient boundary check in ImageMagick's SGIDecode()2006-11-28