CVE-2005-0759: Medium severity ImageMagick ImageMagick vulnerability
Published Mar 23, 2005
·Updated
ImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image with an invalid tag.
Affected Software
13 affected components
ImageMagick ImageMagick=5.3.8
ImageMagick ImageMagick=5.4.3
SGI Propack=3.0
ImageMagick ImageMagick=5.5.4
ImageMagick ImageMagick=5.4.8
ImageMagick ImageMagick=5.4.8.2.1.1.0
ImageMagick ImageMagick=5.5.3.2.1.2.0
ImageMagick ImageMagick=5.4.7
ImageMagick ImageMagick=5.5.6
ImageMagick ImageMagick=5.4.4.5
ImageMagick ImageMagick=5.5.6.0_2003-04-09
ImageMagick ImageMagick=5.3.3
ImageMagick ImageMagick=5.5.7
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Mar 23, 2005
CVE Published
05:00 AM
Mar 26, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0759?
CVE-2005-0759 is considered to have a moderate severity level as it allows remote attackers to cause a denial of service by crashing the application.
2
How do I fix CVE-2005-0759?
To fix CVE-2005-0759, upgrade to a version of ImageMagick that is above 6.0, as this vulnerability affects versions before 6.0.
3
Which versions are affected by CVE-2005-0759?
CVE-2005-0759 affects ImageMagick versions prior to 6.0, specifically from versions 5.3.3 to 5.5.7.
4
What type of attack does CVE-2005-0759 facilitate?
CVE-2005-0759 facilitates a denial of service attack, where it can crash the ImageMagick application.
5
Are there any known exploits for CVE-2005-0759?
Yes, there are known exploits for CVE-2005-0759 that utilize TIFF images with invalid tags to trigger the application crash.