CVE-2006-2440

Impact:
Low
Public Date:
2006-01-02
Bugzilla:
1618102: CVE-2006-2440 security flaw

The MITRE CVE dictionary describes this issue as:

Heap-based buffer overflow in the libMagick component of ImageMagick 6.0.6.2 might allow attackers to execute arbitrary code via an image index array that triggers the overflow during filename glob expansion by the ExpandFilenames function.

Find out more about CVE-2006-2440 from the MITRE CVE dictionary dictionary and NIST NVD.

Statement

Red Hat is aware of this issue and is tracking it via the following bug:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=192278

The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:
http://www.redhat.com/security/updates/classification/

This issue does not affect Red Hat Enterprise Linux 2.1 or 3.

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 3 (ImageMagick) RHSA-2007:0015 2007-02-15
Red Hat Enterprise Linux 2.1 (ImageMagick) RHSA-2007:0015 2007-02-15
Red Hat Enterprise Linux 4 (ImageMagick) RHSA-2007:0015 2007-02-15

This page is generated automatically and has not been checked for errors or omissions.

For clarification or corrections please contact Red Hat Product Security.

Last Modified

CVE description copyright © 2017, The MITRE Corporation

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.