Vulnerability in Imagemagick

CVE-2005-0397

Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a filename argument to convert, which may be called by other web applications.

EPSS: 0.042 (90.0th percentile) — read the EPSS interpretation.

Affected products

  • Imagemagick — versions 5.2, 5.3, 5.4
  • N/a — versions n/a

References