What’s Vulnerable › Vulnerabilities

CVE-2006-0082

• Severity: medium (CVSS 5.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2006-01-04 · updated 2026-06-16
• Weakness: CWE-134

Description

Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program.

Affected products

• ImageMagick: 6.2.3

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345876
• http://rhn.redhat.com/errata/RHSA-2006-0178.html
• http://secunia.com/advisories/18261
• http://secunia.com/advisories/18607
• http://secunia.com/advisories/18851
• http://secunia.com/advisories/18871
• http://secunia.com/advisories/19030
• http://secunia.com/advisories/19183
• http://secunia.com/advisories/19408
• http://secunia.com/advisories/22998
• http://secunia.com/advisories/23090

Get alerted when CVE-2006-0082 or the next vulnerability affects your stack