Approved changes feed: RSS · Atom

cpe:2.3:a:imagemagick:imagemagick:6.0.6.2:*:*:*:*:*:*:*

part: a version: 6.0.6.2 update: *

VendorImagemagick (32d6d751-1860-57ab-a9e9-dc7f7c883682)
ProductImagemagick (fa9ea99f-9ea8-56c5-9f62-fd314777f530)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/imagemagick/imagemagick purl2cpe 2026-06-01 10:15:27.475642
pkg:imagemagick/imagemagick purl2cpe 2026-06-01 10:15:27.475644

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-4987 vulnerable 2026-06-08 04:49:57.615032 Details available
Off-by-one error in the ReadBlobString function in blob.c in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted image file, which triggers the writing of a '\0' character to an out-of-bounds address.
Published: 2007-09-24T22:00:00.000Z
Updated: 2024-08-07T15:17:28.139Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4986 vulnerable 2026-06-08 04:49:57.613052 Details available
Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted (1) .dcm, (2) .dib, (3) .xbm, (4) .xcf, or (5) .xwd image file, which triggers a heap-based buffer overflow.
Published: 2007-09-24T22:00:00.000Z
Updated: 2024-08-07T15:17:27.996Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4985 vulnerable 2026-06-08 04:49:57.595557 Details available
ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers (1) an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls; or (2) an infinite loop in the ReadXCFImage function, related to ReadBlobMSBLong function calls.
Published: 2007-09-24T22:00:00.000Z
Updated: 2024-08-07T15:17:28.182Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2440 vulnerable 2026-06-08 04:49:06.617653 Details available
Heap-based buffer overflow in the libMagick component of ImageMagick 6.0.6.2 might allow attackers to execute arbitrary code via an image index array that triggers the overflow during filename glob expansion by the ExpandFilenames function.
Published: 2006-05-18T10:00:00.000Z
Updated: 2024-08-07T17:51:04.539Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3582 vulnerable 2026-06-08 04:48:41.277777 Details available
ImageMagick before 6.2.4.2-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime.
Published: 2005-11-16T07:37:00.000Z
Updated: 2024-08-07T23:17:23.366Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.