Patchwire CVEs, their patch status, and feeds to follow them

CVE-2006-5456

Fixed in a distro release EPSS 4%

Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.

Published 2006-10-23 · CVE record · OSV

Products: graphicsmagick, imagemagick

Distro releases

ReleasePackageFixed in
Debian 12graphicsmagick1.1.7-9
Debian 12imagemagick7:6.2.4.5.dfsg1-0.11
Debian 13graphicsmagick1.1.7-9
Debian 13imagemagick7:6.2.4.5.dfsg1-0.11
Debian 14graphicsmagick1.1.7-9
Debian 14imagemagick7:6.2.4.5.dfsg1-0.11
Debian 3.1imagemagick6:6.0.6.2-2.8
Red Hat Enterprise Linux 2.1ImageMagick0:5.3.8-18
Red Hat Enterprise Linux 2.1ImageMagick-c++0:5.3.8-18
Red Hat Enterprise Linux 2.1ImageMagick-c++-devel0:5.3.8-18
Red Hat Enterprise Linux 2.1ImageMagick-devel0:5.3.8-18
Red Hat Enterprise Linux 2.1ImageMagick-perl0:5.3.8-18
Red Hat Enterprise Linux 3ImageMagick0:5.5.6-24
Red Hat Enterprise Linux 3ImageMagick-c++0:5.5.6-24
Red Hat Enterprise Linux 3ImageMagick-c++-devel0:5.5.6-24
Red Hat Enterprise Linux 3ImageMagick-debuginfo0:5.5.6-24
Red Hat Enterprise Linux 3ImageMagick-devel0:5.5.6-24
Red Hat Enterprise Linux 3ImageMagick-perl0:5.5.6-24
Red Hat Enterprise Linux 4ImageMagick0:6.0.7.1-16.0.3
Red Hat Enterprise Linux 4ImageMagick-c++0:6.0.7.1-16.0.3
Red Hat Enterprise Linux 4ImageMagick-c++-devel0:6.0.7.1-16.0.3
Red Hat Enterprise Linux 4ImageMagick-debuginfo0:6.0.7.1-16.0.3
Red Hat Enterprise Linux 4ImageMagick-devel0:6.0.7.1-16.0.3
Red Hat Enterprise Linux 4ImageMagick-perl0:6.0.7.1-16.0.3
openSUSE TumbleweedGraphicsMagick1.3.36-1.7
openSUSE TumbleweedImageMagick7.1.0.8-1.2