p PatchFirst

CVE-2005-0397

CVE-2005-0397

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a filename argument to convert, which may be called by other web applications.

EPSS 4.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • graphicsmagick Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.1.7-1

    Update to 1.1.7-1

  • graphicsmagick Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.1.7-1

    Update to 1.1.7-1

  • graphicsmagick Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.1.7-1

    Update to 1.1.7-1

  • imagemagick Debian:12

    Affected ranges
    • ECOSYSTEM: < 6:6.0.6.2-2.2

    Update to 6:6.0.6.2-2.2

  • imagemagick Debian:13

    Affected ranges
    • ECOSYSTEM: < 6:6.0.6.2-2.2

    Update to 6:6.0.6.2-2.2

  • imagemagick Debian:14

    Affected ranges
    • ECOSYSTEM: < 6:6.0.6.2-2.2

    Update to 6:6.0.6.2-2.2

Original sources

Check your server →