CVE-2006-2440: Buffer Overflow
First published: Thu May 18 2006(Updated: )
Heap-based buffer overflow in the libMagick component of ImageMagick 6.0.6.2 might allow attackers to execute arbitrary code via an image index array that triggers the overflow during filename glob expansion by the ExpandFilenames function.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ImageMagick | =6.0.6.2 | |
| ImageMagick | =6.2.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345595
- http://www.debian.org/security/2006/dsa-1168
- http://secunia.com/advisories/21719
- http://www.redhat.com/support/errata/RHSA-2007-0015.html
- http://secunia.com/advisories/24186
- http://secunia.com/advisories/24284
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9481
Frequently Asked Questions
What is the severity of CVE-2006-2440?
CVE-2006-2440 is classified as a critical vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2006-2440?
To fix CVE-2006-2440, update ImageMagick to version 6.2.5 or later.
Which versions of ImageMagick are affected by CVE-2006-2440?
CVE-2006-2440 affects ImageMagick versions 6.0.6.2 and 6.2.4.
What impact does CVE-2006-2440 have on systems running ImageMagick?
The impact of CVE-2006-2440 allows attackers to execute arbitrary code, potentially compromising the affected system.
Is there a workaround for CVE-2006-2440 if I cannot update ImageMagick?
There are no effective workarounds for CVE-2006-2440, and updating the software is strongly recommended.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/description
- agent/remedy
- agent/first-publish-date
- agent/author
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/imagemagick
- canonical/imagemagick
- version/imagemagick/6.0.6.2
- version/imagemagick/6.2.4