Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-2440
HistoryMay 18, 2006 - 12:00 a.m.

CVE-2006-2440

2006-05-1800:00:00
ubuntu.com
ubuntu.com
15

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.5%

Heap-based buffer overflow in the libMagick component of ImageMagick
6.0.6.2 might allow attackers to execute arbitrary code via an image index
array that triggers the overflow during filename glob expansion by the
ExpandFilenames function.

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.5%