Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2006-3744

Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun Rasterfile (bitmap) images that trigger heap-based buffer overflows.

Published

2006-08-25T01:04:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: HIGH
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

4.9

Impact Score

6.4

Weaknesses

Type: Primary
CWE-189

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	imagemagick	imagemagick	≤ 6.2.8	Yes
Application	imagemagick	imagemagick	6.2	Yes
Application	imagemagick	imagemagick	6.2.0.4	Yes
Application	imagemagick	imagemagick	6.2.0.7	Yes
Application	imagemagick	imagemagick	6.2.0.8	Yes
Application	imagemagick	imagemagick	6.2.1	Yes
Application	imagemagick	imagemagick	6.2.1.7	Yes
Application	imagemagick	imagemagick	6.2.2	Yes
Application	imagemagick	imagemagick	6.2.2.5	Yes
Application	imagemagick	imagemagick	6.2.3	Yes
Application	imagemagick	imagemagick	6.2.3.6	Yes
Application	imagemagick	imagemagick	6.2.4	Yes
Application	imagemagick	imagemagick	6.2.4.5	Yes
Application	imagemagick	imagemagick	6.2.5	Yes
Application	imagemagick	imagemagick	6.2.6	Yes
Application	imagemagick	imagemagick	6.2.7	Yes

References

ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc ([email protected])
http://bugs.gentoo.org/show_bug.cgi?id=144854 Patch ([email protected])
http://secunia.com/advisories/21615 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/21621 Vendor Advisory ([email protected])
http://secunia.com/advisories/21671 Vendor Advisory ([email protected])
http://secunia.com/advisories/21679 Vendor Advisory ([email protected])
http://secunia.com/advisories/21719 Vendor Advisory ([email protected])
http://secunia.com/advisories/21780 Vendor Advisory ([email protected])
http://secunia.com/advisories/21832 Vendor Advisory ([email protected])
http://secunia.com/advisories/22036 Vendor Advisory ([email protected])
http://secunia.com/advisories/22096 Vendor Advisory ([email protected])
http://security.gentoo.org/glsa/glsa-200609-14.xml ([email protected])
http://securitytracker.com/id?1016749 ([email protected])
http://www.debian.org/security/2006/dsa-1168 ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2006:155 ([email protected])
http://www.novell.com/linux/security/advisories/2006_50_imagemagick.html ([email protected])
http://www.osvdb.org/28204 ([email protected])
http://www.redhat.com/support/errata/RHSA-2006-0633.html Patch, Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/19699 ([email protected])
http://www.ubuntu.com/usn/usn-340-1 ([email protected])
http://www.vupen.com/english/advisories/2006/3375 Vendor Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/28574 ([email protected])
https://issues.rpath.com/browse/RPL-605 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11486 ([email protected])
ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc (af854a3a-2127-422b-91ae-364da2661108)
http://bugs.gentoo.org/show_bug.cgi?id=144854 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21615 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21621 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21671 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21679 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21719 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21780 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/21832 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22036 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/22096 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200609-14.xml (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1016749 (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2006/dsa-1168 (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2006:155 (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2006_50_imagemagick.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/28204 (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2006-0633.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/19699 (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/usn-340-1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/3375 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/28574 (af854a3a-2127-422b-91ae-364da2661108)
https://issues.rpath.com/browse/RPL-605 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11486 (af854a3a-2127-422b-91ae-364da2661108)