CVE

Id
20248  
CVE No.
CVE-2006-4144  
Status
Candidate  
Description
Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.  
Phase
Assigned (20060815)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
187822 20248 CVE-2006-4144 BUGTRAQ:20060814 [Overflow.pl] ImageMagick ReadSGIImage() Heap Overflow  View
187823 20248 CVE-2006-4144 URL:http://www.securityfocus.com/archive/1/archive/1/443208/100/0/threaded  View
187824 20248 CVE-2006-4144 BUGTRAQ:20060816 Re: [Overflow.pl] ImageMagick ReadSGIImage() Heap Overflow  View
187825 20248 CVE-2006-4144 URL:http://www.securityfocus.com/archive/1/archive/1/443362/100/0/threaded  View
187826 20248 CVE-2006-4144 MISC:http://www.overflow.pl/adv/imsgiheap.txt  View
187827 20248 CVE-2006-4144 CONFIRM:https://issues.rpath.com/browse/RPL-605  View
187828 20248 CVE-2006-4144 DEBIAN:DSA-1213  View
187829 20248 CVE-2006-4144 URL:http://www.debian.org/security/2006/dsa-1213  View
187830 20248 CVE-2006-4144 GENTOO:GLSA-200609-14  View
187831 20248 CVE-2006-4144 URL:http://security.gentoo.org/glsa/glsa-200609-14.xml  View
187832 20248 CVE-2006-4144 MANDRIVA:MDKSA-2006:155  View
187833 20248 CVE-2006-4144 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:155  View
187834 20248 CVE-2006-4144 REDHAT:RHSA-2006:0633  View
187835 20248 CVE-2006-4144 URL:http://www.redhat.com/support/errata/RHSA-2006-0633.html  View
187836 20248 CVE-2006-4144 SGI:20060901-01-P  View
187837 20248 CVE-2006-4144 URL:ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc  View
187838 20248 CVE-2006-4144 SUSE:SUSE-SA:2006:050  View
187839 20248 CVE-2006-4144 URL:http://www.novell.com/linux/security/advisories/2006_50_imagemagick.html  View
187840 20248 CVE-2006-4144 UBUNTU:USN-337-1  View
187841 20248 CVE-2006-4144 URL:http://www.ubuntu.com/usn/usn-337-1  View
187842 20248 CVE-2006-4144 BID:19507  View
187843 20248 CVE-2006-4144 URL:http://www.securityfocus.com/bid/19507  View
187844 20248 CVE-2006-4144 OVAL:oval:org.mitre.oval:def:11129  View
187845 20248 CVE-2006-4144 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11129  View
187846 20248 CVE-2006-4144 SECTRACK:1016699  View
187847 20248 CVE-2006-4144 URL:http://securitytracker.com/id?1016699  View
187848 20248 CVE-2006-4144 SECUNIA:21462  View
187849 20248 CVE-2006-4144 URL:http://secunia.com/advisories/21462  View
187850 20248 CVE-2006-4144 SECUNIA:21525  View
187851 20248 CVE-2006-4144 URL:http://secunia.com/advisories/21525  View
187852 20248 CVE-2006-4144 SECUNIA:21679  View
187853 20248 CVE-2006-4144 URL:http://secunia.com/advisories/21679  View
187854 20248 CVE-2006-4144 SECUNIA:21671  View
187855 20248 CVE-2006-4144 URL:http://secunia.com/advisories/21671  View
187856 20248 CVE-2006-4144 SECUNIA:21832  View
187857 20248 CVE-2006-4144 URL:http://secunia.com/advisories/21832  View
187858 20248 CVE-2006-4144 SECUNIA:21621  View
187859 20248 CVE-2006-4144 URL:http://secunia.com/advisories/21621  View
187860 20248 CVE-2006-4144 SECUNIA:22036  View
187861 20248 CVE-2006-4144 URL:http://secunia.com/advisories/22036  View
187862 20248 CVE-2006-4144 SECUNIA:22096  View
187863 20248 CVE-2006-4144 URL:http://secunia.com/advisories/22096  View
187864 20248 CVE-2006-4144 SECUNIA:22998  View
187865 20248 CVE-2006-4144 URL:http://secunia.com/advisories/22998  View
187866 20248 CVE-2006-4144 SREASON:1385  View
187867 20248 CVE-2006-4144 URL:http://securityreason.com/securityalert/1385  View
187868 20248 CVE-2006-4144 XF:imagemagick-readsgiimage-bo(28372)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58689 JVNDB-2006-000954 GDB における DWARF/DWARF2 デバッグ情報の処理によるバッファオーバーフローの脆弱性 GDB (GNU Debugger) には、DWARF および DWARF2 形式のデバッグ情報を処理するコード部 (dwarfread.c, dwarf2read.c) に不備があり、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2006-4146 20248 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000954.html  View