CVE-2006-4144: Buffer Overflow
Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytesperpixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4144?
CVE-2006-4144 has a medium severity rating as it can lead to a denial of service and potential remote code execution.
How do I fix CVE-2006-4144?
To fix CVE-2006-4144, update ImageMagick to version 6.2.9 or later.
What systems are affected by CVE-2006-4144?
Versions of ImageMagick before 6.2.9, specifically 6.1.7, 6.1.8, and other earlier versions, are affected by CVE-2006-4144.
What type of vulnerability is CVE-2006-4144?
CVE-2006-4144 is an integer overflow vulnerability that can trigger a heap-based buffer overflow.
Can CVE-2006-4144 be exploited remotely?
CVE-2006-4144 requires user-assisted actions to exploit, making it less likely to be exploited remotely without user intervention.