Home > Vulnerability Database > CVE-2006-5456

Mend.io Vulnerability Database

CVE-2006-5456

Date: October 23, 2006

Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.

Severity Score

5.6

Related Resources (40)

Url: http://www.debian.org/security/2006/dsa-1213

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/29816

Url: https://nvd.nist.gov/vuln/detail/CVE-2006-5456

Url: http://secunia.com/advisories/22601

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2006:193

Url: http://www.redhat.com/support/errata/RHSA-2007-0015.html

Url: http://security.gentoo.org/glsa/glsa-200611-19.xml

Url: http://www.securityfocus.com/bid/20707

Url: http://www.ubuntu.com/usn/usn-372-1

Url: http://secunia.com/advisories/22569

Url: http://secunia.com/advisories/22604

Url: http://secunia.com/advisories/24284

Url: http://www.novell.com/linux/security/advisories/2007_3_sr.html

Url: http://www.ubuntu.com/usn/usn-422-1

Url: http://secunia.com/advisories/24186

Url: http://www.securityfocus.com/archive/1/452718/100/100/threaded

Url: ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc

Url: http://secunia.com/advisories/23090

Url: http://www.novell.com/linux/security/advisories/2006_66_imagemagick.html

Url: http://security.gentoo.org/glsa/glsa-200611-07.xml

Url: https://issues.rpath.com/browse/RPL-811

Url: http://www.vupen.com/english/advisories/2006/4171

Url: http://www.vupen.com/english/advisories/2006/4170

Url: http://secunia.com/advisories/22819

Url: https://issues.rpath.com/browse/RPL-1034

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9765

Url: http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.352092

Url: http://secunia.com/advisories/24458

Url: http://packages.debian.org/changelogs/pool/main/g/graphicsmagick/graphicsmagick_1.1.7-9/changelog#versionversion1.1.7-9

Url: http://secunia.com/advisories/22834

Url: http://secunia.com/advisories/22998

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2006-5456

Url: http://www.securityfocus.com/archive/1/459507/100/0/threaded

Url: http://secunia.com/advisories/24196

Url: http://secunia.com/advisories/23121

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2007:041

Url: http://www.osvdb.org/29990

Url: http://secunia.com/advisories/22572

Url: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210921

Url: https://www.mend.io/vulnerability-database/CVE-2006-5456

Severity Score

5.6

Weakness Type (CWE)

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-119

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	5.1
Access Vector (AV):	NETWORK
Access Complexity (AC):	HIGH
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2006-5456

Date: October 23, 2006

Severity Score

Related Resources (40)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?