Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2006-0082
HistoryJan 04, 2006 - 11:03 p.m.

Format string

2006-01-0423:03:00
PRIOn knowledge base
www.prio-n.com
4

7.4 High

AI Score

Confidence

High

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.6%

JSON

Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program.

CPENameOperatorVersion
imagemagickeq6.2.3

References

Related

ubuntucve 2
debiancve 2
cve 2
nessus 19
openvas 25
freebsd 1
gentoo 3
ubuntu 2
redhat 3
centos 4
slackware 1
osv 2
debian 3
fedora 1
suse 1
ubuntucve
ubuntucve
CVE-2006-0082
2006-01-04 00:00:00
CVE-2005-0397
2005-05-02 00:00:00
debiancve
debiancve
CVE-2006-0082
2006-01-04 23:03:00
CVE-2005-0397
2005-05-02 04:00:00
cve
cve
CVE-2006-0082
2006-01-04 23:03:00
CVE-2005-0397
2005-05-02 04:00:00
nessus
nessus
Mandrake Linux Security Advisory : ImageMagick (MDKSA-2006:024)
2006-01-29 00:00:00
Ubuntu 4.10 : imagemagick vulnerability (USN-90-1)
2006-01-15 00:00:00
FreeBSD : ImageMagick -- format string vulnerability (713c3913-8c2b-11d9-b58c-0001020eed82)
2005-07-13 00:00:00
openvas
openvas
FreeBSD Ports: ImageMagick
2008-09-04 00:00:00
Ubuntu: Security Advisory (USN-90-1)
2022-08-26 00:00:00
FreeBSD Ports: ImageMagick
2008-09-04 00:00:00
freebsd
freebsd
ImageMagick -- format string vulnerability
2005-03-02 00:00:00
gentoo
gentoo
ImageMagick: Filename handling vulnerability
2005-03-06 00:00:00
GraphicsMagick: Format string vulnerability
2006-02-26 00:00:00
ImageMagick: Format string vulnerability
2006-02-13 00:00:00
ubuntu
ubuntu
Imagemagick vulnerability
2005-03-03 00:00:00
imagemagick vulnerabilities
2006-01-25 00:00:00
redhat
redhat
(RHSA-2005:320) ImageMagick security update
2005-03-23 00:00:00
(RHSA-2006:0178) ImageMagick security update
2006-02-14 00:00:00
(RHSA-2005:070) ImageMagick security update
2005-03-23 00:00:00
centos
centos
ImageMagick security update
2006-02-16 01:17:06
ImageMagick security update
2006-02-14 17:05:06
ImageMagick security update
2006-02-14 22:40:58
slackware
slackware
[slackware-security] imagemagick
2006-02-15 00:26:55
osv
osv
imagemagick - several
2005-04-01 00:00:00
imagemagick
2006-11-19 00:00:00
debian
debian
[SECURITY] [DSA 702-1] New ImageMagick packages fix several vulnerabilities
2005-04-01 14:26:54
[SECURITY] [DSA 702-1] New ImageMagick packages fix several vulnerabilities
2005-04-01 14:26:54
[SECURITY] [DSA 1213-1] New imagemagick packages fix several vulnerabilities
2006-11-19 12:43:56
fedora
fedora
[SECURITY] Fedora 7 Update: GraphicsMagick-1.1.8-2.fc7
2007-07-30 17:04:58
suse
suse
remote code execution in ImageMagick
2005-03-23 15:05:35

7.4 High

AI Score

Confidence

High

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.6%

JSON
Related for PRION:CVE-2006-0082
ubuntucve2debiancve2cve2nessus19openvas25freebsd1gentoo3ubuntu2redhat3centos4slackware1osv2debian3fedora1suse1