CVE-2006-4144 PUBLISHED CVSS 2.5999999046325684 LOW

Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.

EPSS 19.08% · 95.3th percentile

Risk Scores

CVSS v2.0
2.5999999046325684
EPSS Score
19.08%
95.3th percentile

Affected Products

VendorProductVersions
imagemagickimagemagick6.2.8, 6.0.1, 6.0.2
n/an/an/a

Timeline

References

…and 6 more

Open in Interactive Console →