Buffer overflow in GraphicsMagick and ImageMagick allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c. NOTE: this issue is due to an incomplete patch for CVE-2006-5456.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagickUpgrade graphicsmagick | Jul 30, 2024 | Feb 12, 2007 |
| Suse | — | Upgrade perl-PerlMagickUpgrade suse-releaseUpgrade ImageMagickUpgrade graphicsmagick-develUpgrade perl-GraphicsMagickUpgrade ImageMagick-Magick++Upgrade GraphicsMagickUpgrade GraphicsMagick-c++-develUpgrade GraphicsMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-Magick++-devel | Feb 17, 2015 | Feb 12, 2007 |
| Ubuntu | — | Upgrade libmagick9Upgrade libmagick6 | Nov 8, 2024 | Feb 12, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub