CVE

Id
11603  
CVE No.
CVE-2005-0397  
Status
Candidate  
Description
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a filename argument to convert, which may be called by other web applications.  
Phase
Assigned (20050214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
82938 11603 CVE-2005-0397 BUGTRAQ:20050303 [USN-90-1] Imagemagick vulnerability  View
82939 11603 CVE-2005-0397 URL:http://marc.info/?l=bugtraq&m=110987256010857&w=2  View
82940 11603 CVE-2005-0397 DEBIAN:DSA-702  View
82941 11603 CVE-2005-0397 URL:http://www.debian.org/security/2005/dsa-702  View
82942 11603 CVE-2005-0397 GENTOO:GLSA-200503-11  View
82943 11603 CVE-2005-0397 URL:http://www.gentoo.org/security/en/glsa/glsa-200503-11.xml  View
82944 11603 CVE-2005-0397 CONFIRM:http://bugs.gentoo.org/show_bug.cgi?id=83542  View
82945 11603 CVE-2005-0397 REDHAT:RHSA-2005:320  View
82946 11603 CVE-2005-0397 URL:http://www.redhat.com/support/errata/RHSA-2005-320.html  View
82947 11603 CVE-2005-0397 REDHAT:RHSA-2005:070  View
82948 11603 CVE-2005-0397 URL:http://www.redhat.com/support/errata/RHSA-2005-070.html  View
82949 11603 CVE-2005-0397 SUSE:SUSE-SA:2005:017  View
82950 11603 CVE-2005-0397 URL:http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html  View
82951 11603 CVE-2005-0397 OVAL:oval:org.mitre.oval:def:10302  View
82952 11603 CVE-2005-0397 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10302  View
82953 11603 CVE-2005-0397 XF:imagemagick-filename-format-string(19586)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61989 JVNDB-2005-000191 Mozilla 製品の GIF ファイル解析用ライブラリにおけるヒープオーバーフローの脆弱性 Mozilla 、Mozilla Firefox 、Thunderbird には、GIF 形式の画像ファイル解析用ライブラリにおいて、GIF ファイル構造における Netscape 固有の拡張ブロックの取り扱いに不備が存在するため、ヒープ領域においてバッファオーバーフローが発生する脆弱性が存在します。 CVE-2005-0399 11603 5.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000191.html  View