CVE-2006-5868

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-11-22 · updated 2026-06-16

Description

Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assisted attack vectors via a crafted SGI image.

Affected products

Canonical Ubuntu Linux: 5.10, 6.06
Debian Linux: 3.1, 4.0
ImageMagick: from 6.0 before 6.0.6.2; from 6.2 before 6.2.4.5 — fixed in 6.0.6.2, 6.2.4.5

How to fix

Upgrade to a fixed version: ImageMagick 6.0.6.2, 6.2.4.5. Check the vendor advisory for mitigations.

References

http://secunia.com/advisories/22998
http://secunia.com/advisories/23101
http://secunia.com/advisories/23219
http://secunia.com/advisories/24186
http://secunia.com/advisories/24284
http://www.debian.org/security/2006/dsa-1213
http://www.mandriva.com/security/advisories?name=MDKSA-2006:223
http://www.redhat.com/support/errata/RHSA-2007-0015.html
http://www.securityfocus.com/bid/21185
http://www.ubuntu.com/usn/usn-386-1
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10612

Get alerted when CVE-2006-5868 or the next vulnerability affects your stack