CVE 2006-5456
Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.
Related bugs and status
CVE-2006-5456 (Candidate) is related to these bugs:
Bug #20599: imagemagick in combination with transcode fails (amd64)
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 20599 | imagemagick in combination with transcode fails (amd64) | imagemagick (Ubuntu) | High | Fix Released | ||
| 20599 | imagemagick in combination with transcode fails (amd64) | imagemagick (Debian) | Unknown | Fix Released | ||
Bug #27767: Shell command injection in delegate code (via file names)
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 27767 | Shell command injection in delegate code (via file names) | imagemagick (Ubuntu) | High | Fix Released | ||
| 27767 | Shell command injection in delegate code (via file names) | imagemagick (Debian) | Unknown | Fix Released | ||
Bug #27952: imagemagick: New format string vulnerability in SetImageInfo().
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 27952 | imagemagick: New format string vulnerability in SetImageInfo(). | imagemagick (Ubuntu) | High | Fix Released | ||
| 27952 | imagemagick: New format string vulnerability in SetImageInfo(). | imagemagick (Debian) | Unknown | Fix Released | ||
Bug #28042: libmagick: array index overflow in DisplayImageCommand
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 28042 | libmagick: array index overflow in DisplayImageCommand | imagemagick (Ubuntu) | High | Fix Released | ||
| 28042 | libmagick: array index overflow in DisplayImageCommand | imagemagick (Debian) | Unknown | Fix Released | ||
Bug #68144: Buffer overflows while processing DCM or PALM images
| Summary | In | Importance | Status | |||
|---|---|---|---|---|---|---|
| 68144 | Buffer overflows while processing DCM or PALM images | imagemagick (Ubuntu) | High | Fix Released | ||
| 68144 | Buffer overflows while processing DCM or PALM images | imagemagick (Fedora) | Medium | Fix Released | ||
| 68144 | Buffer overflows while processing DCM or PALM images | graphicsmagick (Ubuntu) | High | Fix Released | ||
See the 
CVE page on Mitre.org
for more details.
