Vulnerability Name: | CVE-2005-0762 (CCN-20753) | ||||||||||||||||
Assigned: | 2004-06-09 | ||||||||||||||||
Published: | 2004-06-09 | ||||||||||||||||
Updated: | 2017-10-11 | ||||||||||||||||
Summary: | Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file. | ||||||||||||||||
CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||||||||||
CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||||||||||
Vulnerability Type: | CWE-Other | ||||||||||||||||
Vulnerability Consequences: | Gain Access | ||||||||||||||||
References: | Source: MITRE Type: CNA CVE-2005-0762 Source: CCN Type: RHSA-2005-070 ImageMagick security update Source: REDHAT Type: Patch RHSA-2005:070 Source: CCN Type: SECTRACK ID: 1013550 ImageMagick TIFF, PSD, and SGI Image File Processing Bugs Let Remote Users Deny Service or Execute Arbitrary Code Source: SECTRACK Type: UNKNOWN 1013550 Source: DEBIAN Type: Patch DSA-702 Source: DEBIAN Type: DSA-702 imagemagick -- several vulnerabilities Source: CCN Type: ImageMagick Web site Introduction to ImageMagick Source: CCN Type: SUSE Security Announcement SUSE Security Announcement: ImageMagick problems (SUSE-SA:2005:017) Source: SUSE Type: Patch SUSE-SA:2005:017 Source: CCN Type: BID-12873 ImageMagick SGI Parser Heap Overflow Vulnerability Source: CCN Type: TLSA-2005-47 Multiple vulnerabilities exist in ImageMagick Source: XF Type: UNKNOWN imagemagick-sgi-execute-code(20753) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:9736 Source: SUSE Type: SUSE-SA:2005:017 ImageMagick: remote code execution | ||||||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration RedHat 1: Denotes that component is vulnerable | ||||||||||||||||
Oval Definitions | |||||||||||||||||
| |||||||||||||||||
BACK |