CVE-2006-0082
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.3%
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program.
Produtos afetados
n/a · n/aReferências
ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.aschttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345876http://rhn.redhat.com/errata/RHSA-2006-0178.htmlhttp://secunia.com/advisories/18261http://secunia.com/advisories/18607http://secunia.com/advisories/18851http://secunia.com/advisories/18871http://secunia.com/advisories/19030http://secunia.com/advisories/19183http://secunia.com/advisories/19408http://secunia.com/advisories/22998http://secunia.com/advisories/23090