CVE-2005-0397

2005-05-0204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-0397

imagemagick

vulnerability

denial of service

format string

remote attackers

arbitrary code

nvd

7.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.066 Low

EPSS

Percentile

93.7%

JSON

Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a filename argument to convert, which may be called by other web applications.

CPENameOperatorVersion
imagemagick:imagemagickimagemagickeq5.5
imagemagick:imagemagickimagemagickeq5.2
imagemagick:imagemagickimagemagickeq5.4
imagemagick:imagemagickimagemagickeq5.3

CPE	Name	Operator	Version
imagemagick:imagemagick	imagemagick	eq	5.5
imagemagick:imagemagick	imagemagick	eq	5.2
imagemagick:imagemagick	imagemagick	eq	5.4
imagemagick:imagemagick	imagemagick	eq	5.3