Unrated severityNVD Advisory· Published Oct 23, 2006· Updated Jun 16, 2026
CVE-2006-5456
CVE-2006-5456
Description
Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*range: <=1.1.6
- cpe:2.3:a:graphicsmagick:graphicsmagick:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:graphicsmagick:graphicsmagick:1.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:graphicsmagick:graphicsmagick:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:graphicsmagick:graphicsmagick:1.1.5:*:*:*:*:*:*:*
- (no CPE)range: <1.1.7
cpe:2.3:a:imagemagick:imagemagick:6.0.7:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:imagemagick:imagemagick:6.0.7:*:*:*:*:*:*:*
- (no CPE)range: <6.0.7
- osv-coords2 versionspkg:rpm/opensuse/GraphicsMagick&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Tumbleweed
< 1.3.36-1.7+ 1 more
- (no CPE)range: < 1.3.36-1.7
- (no CPE)range: < 7.1.0.8-1.2
Patches
Vulnerability mechanics
References
37- bugzilla.redhat.com/bugzilla/show_bug.cginvdPatch
- secunia.com/advisories/22569nvdVendor Advisory
- secunia.com/advisories/22572nvdVendor Advisory
- secunia.com/advisories/22601nvdVendor Advisory
- secunia.com/advisories/22604nvdVendor Advisory
- secunia.com/advisories/22819nvdVendor Advisory
- secunia.com/advisories/22834nvdVendor Advisory
- secunia.com/advisories/22998nvdVendor Advisory
- secunia.com/advisories/23090nvdVendor Advisory
- secunia.com/advisories/23121nvdVendor Advisory
- secunia.com/advisories/24186nvdVendor Advisory
- secunia.com/advisories/24196nvdVendor Advisory
- secunia.com/advisories/24284nvdVendor Advisory
- secunia.com/advisories/24458nvdVendor Advisory
- www.redhat.com/support/errata/RHSA-2007-0015.htmlnvdVendor Advisory
- www.vupen.com/english/advisories/2006/4170nvdVendor Advisory
- www.vupen.com/english/advisories/2006/4171nvdVendor Advisory
- patches.sgi.com/support/free/security/advisories/20070201-01-P.ascnvd
- packages.debian.org/changelogs/pool/main/g/graphicsmagick/graphicsmagick_1.1.7-9/changelognvd
- security.gentoo.org/glsa/glsa-200611-07.xmlnvd
- security.gentoo.org/glsa/glsa-200611-19.xmlnvd
- slackware.com/security/viewer.phpnvd
- www.debian.org/security/2006/dsa-1213nvd
- www.mandriva.com/security/advisoriesnvd
- www.mandriva.com/security/advisoriesnvd
- www.novell.com/linux/security/advisories/2006_66_imagemagick.htmlnvd
- www.novell.com/linux/security/advisories/2007_3_sr.htmlnvd
- www.osvdb.org/29990nvd
- www.securityfocus.com/archive/1/452718/100/100/threadednvd
- www.securityfocus.com/archive/1/459507/100/0/threadednvd
- www.securityfocus.com/bid/20707nvd
- www.ubuntu.com/usn/usn-372-1nvd
- www.ubuntu.com/usn/usn-422-1nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/29816nvd
- issues.rpath.com/browse/RPL-1034nvd
- issues.rpath.com/browse/RPL-811nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9765nvd
News mentions
0No linked articles in our index yet.