CVE-2005-1275: Buffer Overflow
Published Apr 25, 2005
·Updated
Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a PNM file with a small colors value.
Affected Software
29 affected components
GraphicsMagick Graphicsmagick=1.0
GraphicsMagick Graphicsmagick=1.0.6
GraphicsMagick Graphicsmagick=1.1
GraphicsMagick Graphicsmagick=1.1.3
GraphicsMagick Graphicsmagick=1.1.4
GraphicsMagick Graphicsmagick=1.1.5
ImageMagick ImageMagick=6.0
ImageMagick ImageMagick=6.0.1
ImageMagick ImageMagick=6.0.2
ImageMagick ImageMagick=6.0.2.5
ImageMagick ImageMagick=6.0.3
ImageMagick ImageMagick=6.0.4
ImageMagick ImageMagick=6.0.5
ImageMagick ImageMagick=6.0.6
ImageMagick ImageMagick=6.0.7
ImageMagick ImageMagick=6.0.8
ImageMagick ImageMagick=6.1
ImageMagick ImageMagick=6.1.1.6
ImageMagick ImageMagick=6.1.2
ImageMagick ImageMagick=6.1.3
ImageMagick ImageMagick=6.1.4
ImageMagick ImageMagick=6.1.5
ImageMagick ImageMagick=6.1.6
ImageMagick ImageMagick=6.1.7
ImageMagick ImageMagick=6.1.8
ImageMagick ImageMagick=6.2
ImageMagick ImageMagick=6.2.0.4
ImageMagick ImageMagick=6.2.0.7
ImageMagick ImageMagick=6.2.1
Remediation
Patch Available
Event History
Apr 25, 2005
CVE Published
04:00 AM
Apr 26, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1275?
CVE-2005-1275 has a severity rating that indicates it can lead to a denial of service through application crashes.
2
How do I fix CVE-2005-1275?
To fix CVE-2005-1275, update ImageMagick or GraphicsMagick to a version later than 6.2.1 or 1.0.6 respectively.
3
Which software versions are affected by CVE-2005-1275?
CVE-2005-1275 affects ImageMagick versions 6.2.1 and earlier and GraphicsMagick versions 1.0 and 1.x.
4
What type of vulnerability is CVE-2005-1275?
CVE-2005-1275 is a heap-based buffer overflow vulnerability.
5
Can CVE-2005-1275 be exploited remotely?
Yes, CVE-2005-1275 can be exploited remotely through specially crafted PNM files.