Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-2440
HistoryMay 18, 2006 - 12:00 a.m.

CVE-2006-2440

2006-05-1800:00:00
ubuntu.com
ubuntu.com
23

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.012

Percentile

85.5%

Heap-based buffer overflow in the libMagick component of ImageMagick
6.0.6.2 might allow attackers to execute arbitrary code via an image index
array that triggers the overflow during filename glob expansion by the
ExpandFilenames function.

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.012

Percentile

85.5%