Unrated severityNVD Advisory· Published Aug 15, 2006· Updated Jun 16, 2026
CVE-2006-4144
CVE-2006-4144
Description
Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
30cpe:2.3:a:imagemagick:imagemagick:6.0.1:*:*:*:*:*:*:*+ 29 more
- cpe:2.3:a:imagemagick:imagemagick:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.0.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.1:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.1.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.2:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.2.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.2.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.2.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:imagemagick:imagemagick:6.2.8:*:*:*:*:*:*:*
- (no CPE)range: <6.2.9
Patches
Vulnerability mechanics
References
25- secunia.com/advisories/21462nvdPatchVendor Advisory
- www.overflow.pl/adv/imsgiheap.txtnvdExploit
- www.securityfocus.com/bid/19507nvdExploit
- patches.sgi.com/support/free/security/advisories/20060901-01-P.ascnvd
- secunia.com/advisories/21525nvd
- secunia.com/advisories/21621nvd
- secunia.com/advisories/21671nvd
- secunia.com/advisories/21679nvd
- secunia.com/advisories/21832nvd
- secunia.com/advisories/22036nvd
- secunia.com/advisories/22096nvd
- secunia.com/advisories/22998nvd
- security.gentoo.org/glsa/glsa-200609-14.xmlnvd
- securityreason.com/securityalert/1385nvd
- securitytracker.com/idnvd
- www.debian.org/security/2006/dsa-1213nvd
- www.mandriva.com/security/advisoriesnvd
- www.novell.com/linux/security/advisories/2006_50_imagemagick.htmlnvd
- www.redhat.com/support/errata/RHSA-2006-0633.htmlnvd
- www.securityfocus.com/archive/1/443208/100/0/threadednvd
- www.securityfocus.com/archive/1/443362/100/0/threadednvd
- www.ubuntu.com/usn/usn-337-1nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/28372nvd
- issues.rpath.com/browse/RPL-605nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11129nvd
News mentions
0No linked articles in our index yet.