Vulnerability in Imagemagick

CVE-2006-3744

Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun Rasterfile (bitmap) images that trigger heap-based buffer overflows.

EPSS: 0.036 (88.3th percentile) — read the EPSS interpretation.

Affected products

  • Imagemagick — versions 6.2, 6.2.0.4, 6.2.0.7
  • N/a — versions n/a

Weakness classification (CWE)

References