CVE-2006-5456

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-10-23 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.

Affected products

GraphicsMagick: through 1.1.6; 1.0, 1.0.6, 1.1, 1.1.3, 1.1.4, 1.1.5
ImageMagick: 6.0.7

References

http://packages.debian.org/changelogs/pool/main/g/graphicsmagick/graphicsmagick_1.1.7-9/changelog#versionversion1.1.7-9
http://secunia.com/advisories/22569
http://secunia.com/advisories/22572
http://secunia.com/advisories/22601
http://secunia.com/advisories/22604
http://secunia.com/advisories/22819
http://secunia.com/advisories/22834
http://secunia.com/advisories/22998
http://secunia.com/advisories/23090
http://secunia.com/advisories/23121
http://secunia.com/advisories/24186

Get alerted when CVE-2006-5456 or the next vulnerability affects your stack