CVE-2006-5456
- State
- Published
- Severity
- Not scored
- Published
- Oct 23, 2006
- Updated
- Aug 7, 2024
- Reserved
- Oct 23, 2006
Description
Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 24196third-party-advisory
- ADV-2006-4170vdb-entry
- http://packages.debian.org/changelogs/pool/main/g/graphicsmagick/graphicsmagick_1.1.7-9/changelog#versionversion1.1.7-9
- 22572third-party-advisory
- GLSA-200611-07vendor-advisory
- 22601third-party-advisory
- 24458third-party-advisory
- 20061127 rPSA-2006-0218-1 ImageMagickmailing-list
- 22834third-party-advisory
- oval:org.mitre.oval:def:9765vdb-entrysignature
- imagemagick-graphicsmagick-palm-bo(29816)vdb-entry
- 23090third-party-advisory
- 24284third-party-advisory
- https://issues.rpath.com/browse/RPL-1034
- SUSE-SA:2006:066vendor-advisory
- SSA:2007-066-06vendor-advisory
- 22819third-party-advisory
- 22604third-party-advisory
- SUSE-SR:2007:003vendor-advisory
- USN-422-1vendor-advisory
- 20070208 rPSA-2007-0029-1 ImageMagickmailing-list
- GLSA-200611-19vendor-advisory
- 20707vdb-entry
- 23121third-party-advisory
- https://issues.rpath.com/browse/RPL-811
- RHSA-2007:0015vendor-advisory
- ADV-2006-4171vdb-entry
- 22998third-party-advisory
- 24186third-party-advisory
- DSA-1213vendor-advisory
- 29990vdb-entry
- USN-372-1vendor-advisory
- 22569third-party-advisory
- MDKSA-2006:193vendor-advisory
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210921
- MDKSA-2007:041vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.