Lucene search

K
cve[email protected]CVE-2005-0005
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0005

2005-05-0204:00:00
web.nvd.nist.gov
40
cve-2005-0005
imagemagick
psd.c
heap-based buffer overflow
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.108 Low

EPSS

Percentile

95.1%

Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers.

Affected configurations

NVD
Node
graphicsmagickgraphicsmagickMatch1.0
OR
graphicsmagickgraphicsmagickMatch1.0.6
OR
graphicsmagickgraphicsmagickMatch1.1
OR
graphicsmagickgraphicsmagickMatch1.1.3
OR
graphicsmagickgraphicsmagickMatch1.1.4
OR
imagemagickimagemagickMatch5.3.3
OR
imagemagickimagemagickMatch5.4.3
OR
imagemagickimagemagickMatch5.4.7
OR
imagemagickimagemagickMatch6.0
OR
imagemagickimagemagickMatch6.0.1
OR
imagemagickimagemagickMatch6.0.2
OR
imagemagickimagemagickMatch6.0.2.5
OR
imagemagickimagemagickMatch6.0.3
OR
imagemagickimagemagickMatch6.0.4
OR
imagemagickimagemagickMatch6.0.5
OR
imagemagickimagemagickMatch6.0.6
OR
imagemagickimagemagickMatch6.0.7
OR
imagemagickimagemagickMatch6.0.8
OR
imagemagickimagemagickMatch6.1
OR
imagemagickimagemagickMatch6.1.1.6
OR
imagemagickimagemagickMatch6.1.2
OR
imagemagickimagemagickMatch6.1.3
OR
imagemagickimagemagickMatch6.1.4
OR
imagemagickimagemagickMatch6.1.5
OR
imagemagickimagemagickMatch6.1.6
OR
imagemagickimagemagickMatch6.1.7
OR
imagemagickimagemagickMatch6.2
OR
imagemagickimagemagickMatch6.2.0.4
OR
imagemagickimagemagickMatch6.2.0.7
OR
sgipropackMatch3.0
Node
debiandebian_linuxMatch3.0alpha
OR
debiandebian_linuxMatch3.0arm
OR
debiandebian_linuxMatch3.0hppa
OR
debiandebian_linuxMatch3.0ia-32
OR
debiandebian_linuxMatch3.0ia-64
OR
debiandebian_linuxMatch3.0m68k
OR
debiandebian_linuxMatch3.0mips
OR
debiandebian_linuxMatch3.0mipsel
OR
debiandebian_linuxMatch3.0ppc
OR
debiandebian_linuxMatch3.0s-390
OR
debiandebian_linuxMatch3.0sparc
OR
gentoolinuxMatch0.5
OR
gentoolinuxMatch0.7
OR
gentoolinuxMatch1.1a
OR
gentoolinuxMatch1.2
OR
gentoolinuxMatch1.4
OR
gentoolinuxMatch1.4rc1
OR
gentoolinuxMatch1.4rc2
OR
gentoolinuxMatch1.4rc3
OR
susesuse_linuxMatch8.0
OR
susesuse_linuxMatch8.0i386
OR
susesuse_linuxMatch8.1
OR
susesuse_linuxMatch8.2
OR
susesuse_linuxMatch9.0
OR
susesuse_linuxMatch9.0x86_64
OR
susesuse_linuxMatch9.1
OR
susesuse_linuxMatch9.2

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

Low

0.108 Low

EPSS

Percentile

95.1%