CVE-2006-4144 Common Vulnerabilities and Exposures

Upstream information

CVE-2006-4144 at MITRE

Description

Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.

SUSE information

Overall state of this security issue: Resolved

This issue is currently not rated by SUSE as it is not affecting the SUSE Enterprise products.

CVSS v2 Scores
	National Vulnerability Database
Base Score	2.6
Vector	AV:N/AC:H/Au:N/C:N/I:N/A:P
Access Vector	Network
Access Complexity	High
Authentication	None
Confidentiality Impact	None
Integrity Impact	None
Availability Impact	Partial

SUSE Bugzilla entries: 199438 [RESOLVED / FIXED], 222590 [RESOLVED / FIXED]

SUSE Security Advisories:

SUSE-SA:2006:050, published Fri, 08 Sep 2006 17:00:00 +0000

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 05:09:10 2013
CVE page last modified: Sun Sep 8 11:10:35 2024