VULNERABILITY INTELLIGENCE
CVE-2006-4144
CVSS score2.6 LOW
EPSS probability11.03%
CISA KEVNot currently listed
Published2006-08-15
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:N/I:N/A:P
Description
Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.