Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2006-3743

Multiple buffer overflows in ImageMagick before 6.2.9 allow user-assisted attackers to execute arbitrary code via crafted XCF images.

Published

2006-08-25T01:04:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: HIGH
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

4.9

Impact Score

6.4

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	imagemagick	imagemagick	6.2	Yes
Application	imagemagick	imagemagick	6.2.0.4	Yes
Application	imagemagick	imagemagick	6.2.0.7	Yes
Application	imagemagick	imagemagick	6.2.0.8	Yes
Application	imagemagick	imagemagick	6.2.1	Yes
Application	imagemagick	imagemagick	6.2.1.7	Yes
Application	imagemagick	imagemagick	6.2.2	Yes
Application	imagemagick	imagemagick	6.2.2.5	Yes
Application	imagemagick	imagemagick	6.2.3	Yes
Application	imagemagick	imagemagick	6.2.3.6	Yes
Application	imagemagick	imagemagick	6.2.4	Yes
Application	imagemagick	imagemagick	6.2.4.5	Yes
Application	imagemagick	imagemagick	6.2.5	Yes
Application	imagemagick	imagemagick	6.2.6	Yes
Application	imagemagick	imagemagick	6.2.7	Yes
Application	imagemagick	imagemagick	6.2.8	Yes

References

ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc ([email protected])
http://bugs.gentoo.org/show_bug.cgi?id=144854 Patch ([email protected])
http://secunia.com/advisories/21615 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/21621 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/21671 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/21679 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/21719 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/21780 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/21832 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/22036 ([email protected])
http://secunia.com/advisories/22096 ([email protected])
http://security.gentoo.org/glsa/glsa-200609-14.xml ([email protected])
http://securitytracker.com/id?1016749 Patch ([email protected])
http://www.debian.org/security/2006/dsa-1168 Patch, Vendor Advisory ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:155 ([email protected])
http://www.novell.com/linux/security/advisories/2006_50_imagemagick.html Patch, Vendor Advisory ([email protected])
http://www.osvdb.org/28205 Patch ([email protected])
http://www.redhat.com/support/errata/RHSA-2006-0633.html Patch ([email protected])
http://www.securityfocus.com/bid/19697 Patch ([email protected])
http://www.ubuntu.com/usn/usn-340-1 Patch ([email protected])
http://www.vupen.com/english/advisories/2006/3375 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/28575 ([email protected])
https://issues.rpath.com/browse/RPL-605 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9895 ([email protected])
ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc (af854a3a-2127-422b-91ae-364da2661108)
http://bugs.gentoo.org/show_bug.cgi?id=144854 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21615 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21621 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21671 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21679 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21719 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21780 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21832 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22036 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22096 (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200609-14.xml (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1016749 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2006/dsa-1168 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:155 (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2006_50_imagemagick.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/28205 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2006-0633.html Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/19697 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-340-1 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3375 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/28575 (af854a3a-2127-422b-91ae-364da2661108)
https://issues.rpath.com/browse/RPL-605 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9895 (af854a3a-2127-422b-91ae-364da2661108)