NVD

Id
58822  
Name
CVE-2006-0082  
Description
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-01-04  
Modified Date
2011-03-07  
Seq
2006-0082  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
302045 58822 CVE-2006-0082 20060301-01-U  View
302046 58822 CVE-2006-0082 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345876  View
302047 58822 CVE-2006-0082 oval:org.mitre.oval:def:10717  View
302048 58822 CVE-2006-0082 RHSA-2006:0178  View
302049 58822 CVE-2006-0082 500  View
302050 58822 CVE-2006-0082 1015623  View
302051 58822 CVE-2006-0082 SSA:2006-045-03  View
302052 58822 CVE-2006-0082 231321  View
302053 58822 CVE-2006-0082 DSA-1213  View
302054 58822 CVE-2006-0082 GLSA-200602-06  View
302055 58822 CVE-2006-0082 GLSA-200602-13.xml  View
302056 58822 CVE-2006-0082 MDKSA-2006:024  View
302057 58822 CVE-2006-0082 SUSE-SR:2006:006  View
302058 58822 CVE-2006-0082 20061127 rPSA-2006-0218-1 ImageMagick  View
302059 58822 CVE-2006-0082 12717  View
302060 58822 CVE-2006-0082 USN-246-1  View
302061 58822 CVE-2006-0082 ADV-2008-0412  View
302062 58822 CVE-2006-0082 https://issues.rpath.com/browse/RPL-389  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62552 JVNDB-2005-000754 ImageMagick の image.c におけるフォーマットストリングの脆弱性 ImageMagick の image.c にはSetImageInfo() 関数において、ファイル名中の %d のような数値フォーマット文字指定子の取り扱いに不備があり、フォーマットストリングの脆弱性が存在します。 CVE-2006-0082 16184 CVE-2006-0082 58822 5.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000754.html 2005-12-29 2008-02-12 View