Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2006-4144
HistoryAug 15, 2006 - 11:04 p.m.

CVE-2006-4144

2006-08-1523:04:00
mitre
web.nvd.nist.gov
40
cve-2006-4144
imagemagick
integer overflow
readsgiimage
denial of service
arbitrary code execution
nvd

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

AI Score

7.5

Confidence

Low

EPSS

0.463

Percentile

97.4%

JSON

Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.

Affected configurations

Nvd
Node
imagemagickimagemagickMatch6.0.1
OR
imagemagickimagemagickMatch6.0.2
OR
imagemagickimagemagickMatch6.0.2.5
OR
imagemagickimagemagickMatch6.0.3
OR
imagemagickimagemagickMatch6.0.4
OR
imagemagickimagemagickMatch6.0.5
OR
imagemagickimagemagickMatch6.0.6
OR
imagemagickimagemagickMatch6.0.7
OR
imagemagickimagemagickMatch6.0.8
OR
imagemagickimagemagickMatch6.1
OR
imagemagickimagemagickMatch6.1.1.6
OR
imagemagickimagemagickMatch6.1.2
OR
imagemagickimagemagickMatch6.1.3
OR
imagemagickimagemagickMatch6.1.4
OR
imagemagickimagemagickMatch6.1.5
OR
imagemagickimagemagickMatch6.1.6
OR
imagemagickimagemagickMatch6.1.7
OR
imagemagickimagemagickMatch6.1.8
OR
imagemagickimagemagickMatch6.2
OR
imagemagickimagemagickMatch6.2.0.4
OR
imagemagickimagemagickMatch6.2.0.7
OR
imagemagickimagemagickMatch6.2.1
OR
imagemagickimagemagickMatch6.2.2
OR
imagemagickimagemagickMatch6.2.4
OR
imagemagickimagemagickMatch6.2.4.5
OR
imagemagickimagemagickMatch6.2.5
OR
imagemagickimagemagickMatch6.2.6
OR
imagemagickimagemagickMatch6.2.7
OR
imagemagickimagemagickMatch6.2.8
VendorProductVersionCPE
imagemagickimagemagick6.0.1cpe:2.3:a:imagemagick:imagemagick:6.0.1:*:*:*:*:*:*:*
imagemagickimagemagick6.0.2cpe:2.3:a:imagemagick:imagemagick:6.0.2:*:*:*:*:*:*:*
imagemagickimagemagick6.0.2.5cpe:2.3:a:imagemagick:imagemagick:6.0.2.5:*:*:*:*:*:*:*
imagemagickimagemagick6.0.3cpe:2.3:a:imagemagick:imagemagick:6.0.3:*:*:*:*:*:*:*
imagemagickimagemagick6.0.4cpe:2.3:a:imagemagick:imagemagick:6.0.4:*:*:*:*:*:*:*
imagemagickimagemagick6.0.5cpe:2.3:a:imagemagick:imagemagick:6.0.5:*:*:*:*:*:*:*
imagemagickimagemagick6.0.6cpe:2.3:a:imagemagick:imagemagick:6.0.6:*:*:*:*:*:*:*
imagemagickimagemagick6.0.7cpe:2.3:a:imagemagick:imagemagick:6.0.7:*:*:*:*:*:*:*
imagemagickimagemagick6.0.8cpe:2.3:a:imagemagick:imagemagick:6.0.8:*:*:*:*:*:*:*
imagemagickimagemagick6.1cpe:2.3:a:imagemagick:imagemagick:6.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 291

References

Related

exploitdb 1
ubuntucve 1
nvd 1
debiancve 1
openvas 9
cvelist 1
checkpoint_advisories 1
nessus 17
ubuntu 1
centos 2
oraclelinux 1
redhat 1
suse 1
gentoo 1
debian 1
osv 1
fedora 2
exploitdb
exploitdb
ImageMagick 6.x - '.SGI' Image File Remote Heap Buffer Overflow
2006-08-14 00:00:00
ubuntucve
ubuntucve
CVE-2006-4144
2006-08-15 00:00:00
nvd
nvd
CVE-2006-4144
2006-08-15 23:04:00
debiancve
debiancve
CVE-2006-4144
2006-08-15 23:04:00
openvas
openvas
Ubuntu: Security Advisory (USN-337-1)
2022-08-26 00:00:00
Gentoo Security Advisory GLSA 200609-14 (Imagemagick)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200609-14 (Imagemagick)
2008-09-24 00:00:00
cvelist
cvelist
CVE-2006-4144
2006-08-15 23:00:00
checkpoint_advisories
checkpoint_advisories
ImageMagick SGI File Handling Buffer Overflow (CVE-2006-4144)
2006-12-28 00:00:00
nessus
nessus
SuSE 10 Security Update : ImageMagick (ZYPP Patch Number 2412)
2007-12-13 00:00:00
openSUSE 10 Security Update : ImageMagick (ImageMagick-2414)
2007-10-17 00:00:00
Ubuntu 5.04 / 5.10 / 6.06 LTS : imagemagick vulnerability (USN-337-1)
2007-11-10 00:00:00
ubuntu
ubuntu
imagemagick vulnerability
2006-08-17 00:00:00
centos
centos
ImageMagick security update
2006-08-27 23:17:16
ImageMagick security update
2006-08-24 12:57:17
oraclelinux
oraclelinux
Moderate ImageMagick security update
2006-11-30 00:00:00
redhat
redhat
(RHSA-2006:0633) ImageMagick security update
2006-08-24 00:00:00
suse
suse
code execution in ImageMagick
2006-09-08 13:55:45
gentoo
gentoo
ImageMagick: Multiple Vulnerabilities
2006-09-26 00:00:00
debian
debian
[SECURITY] [DSA 1213-1] New imagemagick packages fix several vulnerabilities
2006-11-19 12:43:56
osv
osv
imagemagick
2006-11-19 00:00:00
fedora
fedora
[SECURITY] Fedora Core 5 Update: ImageMagick-6.2.5.4-4.2.1.fc5.8
2007-04-17 12:53:26
[SECURITY] Fedora 7 Update: GraphicsMagick-1.1.8-2.fc7
2007-07-30 17:04:58

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

AI Score

7.5

Confidence

Low

EPSS

0.463

Percentile

97.4%

JSON
Related for CVE-2006-4144
exploitdb1ubuntucve1nvd1debiancve1openvas9cvelist1checkpoint_advisories1nessus17ubuntu1centos2oraclelinux1redhat1suse1gentoo1debian1osv1fedora2