CVE-2005-0005

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-0005
Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers.

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://marc.info/?l=bugtraq&m=110608222117215&w=2
http://www.debian.org/security/2005/dsa-646 Patch Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200501-37.xml
http://www.idefense.com/application/poi/display?id=184&type=vulnerabilities Exploit
http://www.redhat.com/support/errata/RHSA-2005-070.html
http://www.redhat.com/support/errata/RHSA-2005-071.html Patch
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9925
http://marc.info/?l=bugtraq&m=110608222117215&w=2
http://www.debian.org/security/2005/dsa-646 Patch Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200501-37.xml
http://www.idefense.com/application/poi/display?id=184&type=vulnerabilities Exploit
http://www.redhat.com/support/errata/RHSA-2005-070.html
http://www.redhat.com/support/errata/RHSA-2005-071.html Patch
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9925
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:graphicsmagick:graphicsmagick:1.0:*:*:*:*:*:*:*
cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:graphicsmagick:graphicsmagick:1.1:*:*:*:*:*:*:*
cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.3:*:*:*:*:*:*:*
cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.4:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:5.3.3:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:5.4.3:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:5.4.7:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.0:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.0.2.5:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.0.3:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.0.4:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.0.5:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.0.6:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.0.7:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.0.8:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.1:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.1.1.6:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.1.2:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.1.3:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.1.4:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.1.5:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.1.6:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.1.7:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.2:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.2.0.4:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:6.2.0.7:*:*:*:*:*:*:*
cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*
cpe:2.3:o:gentoo:linux:0.5:*:*:*:*:*:*:*
cpe:2.3:o:gentoo:linux:0.7:*:*:*:*:*:*:*
cpe:2.3:o:gentoo:linux:1.1a:*:*:*:*:*:*:*
cpe:2.3:o:gentoo:linux:1.2:*:*:*:*:*:*:*
cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*
cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*
cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*
cpe:2.3:o:gentoo:linux:1.4:rc3:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*
History

20 Nov 2024, 23:54

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=110608222117215&w=2 - () http://marc.info/?l=bugtraq&m=110608222117215&w=2 -
References () http://www.debian.org/security/2005/dsa-646 - Patch, Vendor Advisory () http://www.debian.org/security/2005/dsa-646 - Patch, Vendor Advisory
References () http://www.gentoo.org/security/en/glsa/glsa-200501-37.xml - () http://www.gentoo.org/security/en/glsa/glsa-200501-37.xml -
References () http://www.idefense.com/application/poi/display?id=184&type=vulnerabilities - Exploit () http://www.idefense.com/application/poi/display?id=184&type=vulnerabilities - Exploit
References () http://www.redhat.com/support/errata/RHSA-2005-070.html - () http://www.redhat.com/support/errata/RHSA-2005-070.html -
References () http://www.redhat.com/support/errata/RHSA-2005-071.html - Patch () http://www.redhat.com/support/errata/RHSA-2005-071.html - Patch
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9925 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9925 -
Information

Published : 2005-05-02 04:00

Updated : 2024-11-20 23:54

NVD link : CVE-2005-0005

Mitre link : CVE-2005-0005

CVE.ORG link : CVE-2005-0005

JSON object : View

Products Affected

debian

  • debian_linux

suse

  • suse_linux

gentoo

  • linux

imagemagick

  • imagemagick

graphicsmagick

  • graphicsmagick

sgi

  • propack
CWE
NVD-CWE-Other