Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
2.6
CVSSv2

CVE-2006-4144

Published: 15/08/2006 Updated: 17/10/2018
CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9
VMScore: 265
Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Subscribe to Imagemagick

Vulnerability Summary

Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick prior to 6.2.9 allows user-assisted malicious users to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.

Vulnerable Product Search on Vulmon Subscribe to Product

imagemagick imagemagick 6.0.2.5

imagemagick imagemagick 6.0.3

imagemagick imagemagick 6.1.1.6

imagemagick imagemagick 6.1.2

imagemagick imagemagick 6.2

imagemagick imagemagick 6.2.0.4

imagemagick imagemagick 6.2.7

imagemagick imagemagick 6.2.8

imagemagick imagemagick 6.0.1

imagemagick imagemagick 6.0.2

imagemagick imagemagick 6.0.8

imagemagick imagemagick 6.1

imagemagick imagemagick 6.1.7

imagemagick imagemagick 6.1.8

imagemagick imagemagick 6.2.5

imagemagick imagemagick 6.2.6

imagemagick imagemagick 6.0.6

imagemagick imagemagick 6.0.7

imagemagick imagemagick 6.1.5

imagemagick imagemagick 6.1.6

imagemagick imagemagick 6.2.2

imagemagick imagemagick 6.2.4

imagemagick imagemagick 6.2.4.5

imagemagick imagemagick 6.0.4

imagemagick imagemagick 6.0.5

imagemagick imagemagick 6.1.3

imagemagick imagemagick 6.1.4

imagemagick imagemagick 6.2.0.7

imagemagick imagemagick 6.2.1

Vendor Advisories

Ubuntu Security Notice: imagemagick vulnerability
Damian Put discovered a buffer overflow in imagemagick’s SGI file format decoder By tricking an user or automated system into processing a specially crafted SGI image, this could be exploited to execute arbitrary code with the user’s privileges ...
Debian Security Advisories: DSA-1213-1 imagemagick -- several vulnerabilities
Several remote vulnerabilities have been discovered in Imagemagick, a collection of image manipulation programs, which may lead to the execution of arbitrary code The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-0082 Daniel Kobras discovered that Imagemagick is vulnerable to format string attack ...
Debian CVElist Bug Report Logs: CVE-2006-3743/-3744: ImageMagick XCF and Sun Rasterfile Buffer Overflows
Debian Bug report logs - #385062 CVE-2006-3743/-3744: ImageMagick XCF and Sun Rasterfile Buffer Overflows Package: imagemagick; Maintainer for imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Source for imagemagick is src:imagemagick (PTS, buildd, popcon) Reported by: Stefan Fritsch &l ...
Debian CVElist Bug Report Logs: libmagick: array index overflow in DisplayImageCommand
Debian Bug report logs - #345595 libmagick: array index overflow in DisplayImageCommand Package: imagemagick; Maintainer for imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Source for imagemagick is src:imagemagick (PTS, buildd, popcon) Reported by: Eero Häkkinen <eero17@bigfootc ...
Debian CVElist Bug Report Logs: libmagick9: Buffer overflow in SGI parser [CVE-2006-4144]
Debian Bug report logs - #383314 libmagick9: Buffer overflow in SGI parser [CVE-2006-4144] Package: libmagick9; Maintainer for libmagick9 is (unknown); Reported by: Martin Pitt <martinpitt@ubuntucom> Date: Wed, 16 Aug 2006 14:48:06 UTC Severity: grave Tags: fixed, patch, security Found in versions 6245dfsg1-09, 6:6 ...
Debian CVElist Bug Report Logs: [CVE-2005-4601] Shell command injection in delegate code (via file names)
Debian Bug report logs - #345238 [CVE-2005-4601] Shell command injection in delegate code (via file names) Package: imagemagick; Maintainer for imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Source for imagemagick is src:imagemagick (PTS, buildd, popcon) Reported by: Florian Weimer & ...
Debian CVElist Bug Report Logs: Buffer overflows in imagemagick
Debian Bug report logs - #393025 Buffer overflows in imagemagick Package: imagemagick; Maintainer for imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Source for imagemagick is src:imagemagick (PTS, buildd, popcon) Reported by: Stefan Fritsch <sf@sfritschde> Date: Sat, 14 Oct ...
Debian CVElist Bug Report Logs: [CVE-2006-0082] imagemagick: New format string vulnerability in SetImageInfo().
Debian Bug report logs - #345876 [CVE-2006-0082] imagemagick: New format string vulnerability in SetImageInfo() Package: imagemagick; Maintainer for imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Source for imagemagick is src:imagemagick (PTS, buildd, popcon) Reported by: Daniel Kob ...
Debian CVElist Bug Report Logs: imagemagick: Buffer overflow vulnerability in PALM coder. (CVE-2007-0770)
Debian Bug report logs - #410435 imagemagick: Buffer overflow vulnerability in PALM coder (CVE-2007-0770) Package: imagemagick; Maintainer for imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Source for imagemagick is src:imagemagick (PTS, buildd, popcon) Reported by: Daniel Kobras &l ...

Exploits

Exploit DB: ImageMagick 6.x - '.SGI' Image File Remote Heap Buffer Overflow
source: wwwsecurityfocuscom/bid/19507/info ImageMagick is prone to a remote heap buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer This issue allows attackers to execute arbitrary machine code in the context of applications ...

References

NVD-CWE-Otherhttp://www.overflow.pl/adv/imsgiheap.txthttp://www.securityfocus.com/bid/19507http://secunia.com/advisories/21462http://www.ubuntu.com/usn/usn-337-1http://securitytracker.com/id?1016699http://secunia.com/advisories/21525http://www.redhat.com/support/errata/RHSA-2006-0633.htmlhttp://secunia.com/advisories/21679https://issues.rpath.com/browse/RPL-605http://www.novell.com/linux/security/advisories/2006_50_imagemagick.htmlhttp://secunia.com/advisories/21671http://secunia.com/advisories/21832http://secunia.com/advisories/21621ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.aschttp://secunia.com/advisories/22036http://security.gentoo.org/glsa/glsa-200609-14.xmlhttp://secunia.com/advisories/22096http://www.debian.org/security/2006/dsa-1213http://secunia.com/advisories/22998http://www.mandriva.com/security/advisories?name=MDKSA-2006:155http://securityreason.com/securityalert/1385https://exchange.xforce.ibmcloud.com/vulnerabilities/28372https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11129http://www.securityfocus.com/archive/1/443362/100/0/threadedhttp://www.securityfocus.com/archive/1/443208/100/0/threadedhttps://usn.ubuntu.com/337-1/https://nvd.nist.govhttps://www.exploit-db.com/exploits/28383/
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
client sideCVE-2023-31889template injectionCVE-2024-4304CVE-2006-4304CVE-2024-33272type confusionCVE-2024-21345CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook