Debian Security Bug TrackerDEBIANCVE:CVE-2006-0082CVE-2006-0082
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.017 Low
EPSS
Percentile
87.8%
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | imagemagick | < 6:6.2.4.5-0.6 | imagemagick_6:6.2.4.5-0.6_all.deb |
| Debian | 11 | all | imagemagick | < 6:6.2.4.5-0.6 | imagemagick_6:6.2.4.5-0.6_all.deb |
| Debian | 10 | all | imagemagick | < 6:6.2.4.5-0.6 | imagemagick_6:6.2.4.5-0.6_all.deb |
| Debian | 999 | all | imagemagick | < 6:6.2.4.5-0.6 | imagemagick_6:6.2.4.5-0.6_all.deb |
| Debian | 13 | all | imagemagick | < 6:6.2.4.5-0.6 | imagemagick_6:6.2.4.5-0.6_all.deb |
Related
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.017 Low
EPSS
Percentile
87.8%