CVE-2006-5456: Buffer Overflow
Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5456?
CVE-2006-5456 is classified as a critical vulnerability due to its potential to cause denial of service and execute arbitrary code.
How do I fix CVE-2006-5456?
To fix CVE-2006-5456, update GraphicsMagick to version 1.1.7 or newer and ImageMagick to version 6.0.8 or newer.
What software is affected by CVE-2006-5456?
CVE-2006-5456 affects multiple versions of GraphicsMagick up to 1.1.6 and ImageMagick version 6.0.7.
What are the exploit vectors for CVE-2006-5456?
Attackers can exploit CVE-2006-5456 via a specially crafted DCM or PALM image to trigger buffer overflows.
Can CVE-2006-5456 lead to remote code execution?
Yes, CVE-2006-5456 can potentially allow remote code execution if exploited through user-assisted inputs.