CVE-2005-4601

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-31 · updated 2026-06-16

Description

The delegate code in ImageMagick 6.2.4.5-0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename that is processed by the display command.

Affected products

ImageMagick: 6.2.4.5

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345238
http://rhn.redhat.com/errata/RHSA-2006-0178.html
http://secunia.com/advisories/18261
http://secunia.com/advisories/18607
http://secunia.com/advisories/18631
http://secunia.com/advisories/18871
http://secunia.com/advisories/19183
http://secunia.com/advisories/19408
http://secunia.com/advisories/23090
http://secunia.com/advisories/28800
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.341682

Get alerted when CVE-2005-4601 or the next vulnerability affects your stack