CVE-2005-0397 Other in n/a
Remote attackers can cause denial of service or execute arbitrary code via format string vulnerabilities in ImageMagick's image processing functions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-0397?
CVE-2005-0397 is a high-severity vulnerability in Imagemagick Imagemagick, published on 7 Mar 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a filename argument to convert, which may be called by other web applications.
Which versions are affected by CVE-2005-0397?
It affects 1 product.
Linux distribution packages (24)
ImageMagick Red Hat:enterprise_linux:4::as | All versions | 0:6.0.7.1-10 |
ImageMagick-c++ Red Hat:enterprise_linux:4::as | All versions | 0:6.0.7.1-10 |
ImageMagick-c++-devel Red Hat:enterprise_linux:4::as | All versions | 0:6.0.7.1-10 |
ImageMagick-debuginfo Red Hat:enterprise_linux:4::as | All versions | 0:6.0.7.1-10 |
ImageMagick-devel Red Hat:enterprise_linux:4::as | All versions | 0:6.0.7.1-10 |
ImageMagick-perl Red Hat:enterprise_linux:4::as | All versions | 0:6.0.7.1-10 |
ImageMagick Red Hat:enterprise_linux:4::desktop | All versions | 0:6.0.7.1-10 |
ImageMagick-c++ Red Hat:enterprise_linux:4::desktop | All versions | 0:6.0.7.1-10 |
ImageMagick-c++-devel Red Hat:enterprise_linux:4::desktop | All versions | 0:6.0.7.1-10 |
ImageMagick-debuginfo Red Hat:enterprise_linux:4::desktop | All versions | 0:6.0.7.1-10 |
ImageMagick-devel Red Hat:enterprise_linux:4::desktop | All versions | 0:6.0.7.1-10 |
ImageMagick-perl Red Hat:enterprise_linux:4::desktop | All versions | 0:6.0.7.1-10 |
ImageMagick Red Hat:enterprise_linux:4::es | All versions | 0:6.0.7.1-10 |
ImageMagick-c++ Red Hat:enterprise_linux:4::es | All versions | 0:6.0.7.1-10 |
ImageMagick-c++-devel Red Hat:enterprise_linux:4::es | All versions | 0:6.0.7.1-10 |
ImageMagick-debuginfo Red Hat:enterprise_linux:4::es | All versions | 0:6.0.7.1-10 |
ImageMagick-devel Red Hat:enterprise_linux:4::es | All versions | 0:6.0.7.1-10 |
ImageMagick-perl Red Hat:enterprise_linux:4::es | All versions | 0:6.0.7.1-10 |
ImageMagick Red Hat:enterprise_linux:4::ws | All versions | 0:6.0.7.1-10 |
ImageMagick-c++ Red Hat:enterprise_linux:4::ws | All versions | 0:6.0.7.1-10 |
ImageMagick-c++-devel Red Hat:enterprise_linux:4::ws | All versions | 0:6.0.7.1-10 |
ImageMagick-debuginfo Red Hat:enterprise_linux:4::ws | All versions | 0:6.0.7.1-10 |
ImageMagick-devel Red Hat:enterprise_linux:4::ws | All versions | 0:6.0.7.1-10 |
ImageMagick-perl Red Hat:enterprise_linux:4::ws | All versions | 0:6.0.7.1-10 |
Products include Imagemagick Imagemagick.
How do I fix CVE-2005-0397?
Upgrade to a fixed version.
Is CVE-2005-0397 being exploited?
There is no known exploitation of CVE-2005-0397 in the wild and no public exploit code.
Other vulnerabilities in Imagemagick Imagemagick
Sources
Also known as DEBIAN-CVE-2005-0397, GHSA-9qw2-jqcg-348f, RHSA-2005:320.