Buffer overflow in GraphicsMagick and ImageMagick allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c. NOTE: this issue is due to an incomplete patch for CVE-2006-5456.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade graphicsmagickUpgrade imagemagick | Jul 30, 2024 | Feb 12, 2007 |
| Suse | — | Upgrade suse-releaseUpgrade ImageMagick-Magick++Upgrade perl-PerlMagickUpgrade GraphicsMagickUpgrade GraphicsMagick-c++-develUpgrade graphicsmagick-develUpgrade ImageMagickUpgrade perl-GraphicsMagickUpgrade ImageMagick-develUpgrade GraphicsMagick-c++Upgrade ImageMagick-Magick++-devel | Feb 17, 2015 | Feb 12, 2007 |
| Ubuntu | — | Upgrade libmagick6Upgrade libmagick9 | Nov 8, 2024 | Feb 12, 2007 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub