CVE-2006-0082
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and...
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program.
Exploit likelihood
What each source reports
NVD Score used
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program.
- Record
CVE-2006-0082- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Weakness
- CWE-134
- Updated
- 2026-11-02
CVE List No score
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program.
- Record
CVE-2006-0082- Updated
- 2026-11-02
EUVDEUVD-2006-0090 No score
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program.
- Record
EUVD-2006-0090- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gqwr-p67x-5fff No score
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and...
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program.
- Record
GHSA-gqwr-p67x-5fff- Weakness
- CWE-134
- Updated
- 2026-11-02
OSV No score
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program.
- Record
CVE-2006-0082- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-0082 No score
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert program.
- Record
DEBIAN-CVE-2006-0082- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10597-1 No score
ImageMagick-7.1.0.8-1.2 on GA media
These are all security issues fixed in the ImageMagick-7.1.0.8-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10597-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
imagemagickDebian:12 |
before 6:6.2.4.5-0.6 | 6:6.2.4.5-0.6 |
imagemagickDebian:13 |
before 6:6.2.4.5-0.6 | 6:6.2.4.5-0.6 |
imagemagickDebian:14 |
before 6:6.2.4.5-0.6 | 6:6.2.4.5-0.6 |
imagemagickDebian:3.1 From an advisory covering 4 CVEs |
before 6:6.0.6.2-2.8, plus listed versions 6:6.0.6.2-2.46:6.0.6.2-2.56:6.0.6.2-2.66:6.0.6.2-2.7 |
6:6.0.6.2-2.8 |
ImageMagickRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-c++Red Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-develRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-perlRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
Show 43 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ImageMagickRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-c++Red Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-develRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-perlRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagickRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-c++Red Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-develRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-perlRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagickRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-c++Red Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-develRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagick-perlRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:5.5.6-18 | 0:5.5.6-18 |
ImageMagickRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-c++Red Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-c++-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-perlRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagickRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-c++Red Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-c++-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-perlRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagickRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-c++Red Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-c++-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-perlRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagickRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-c++Red Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-c++-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagick-perlRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:6.0.7.1-14 | 0:6.0.7.1-14 |
ImageMagickopenSUSE:Tumbleweed From an advisory covering 7 CVEs |
before 7.1.0.8-1.2 | 7.1.0.8-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0082 is a medium vulnerability (CVSS 5.1) in Imagemagick, published January 4, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.34%, the 91st percentile. Fixed in imagemagick 6:6.2.4.5-0.6.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10717
secunia.com/advisories/19408
securityfocus.com/archive/1/452718/100/100/threaded
bugs.debian.org/cgi-bin/bugreport.cgi?bug=345876
novell.com/linux/security/advisories/2006_06_sr.html
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.341682
Show 42 moreShow less
vupen.com/english/advisories/2008/0412
mandriva.com/security/advisories?name=MDKSA-2006:024
gentoo.org/security/en/glsa/glsa-200602-13.xml
securitytracker.com/id?1015623
issues.rpath.com/browse/RPL-389
sunsolve.sun.com/search/document.do?assetkey=1-26-231321-1
ubuntu.com/usn/usn-246-1
securityreason.com/securityalert/500
debian.org/security/2006/dsa-1213
rhn.redhat.com/errata/RHSA-2006-0178.html
nvd.nist.gov/vuln/detail/CVE-2006-0082
github.com/advisories/GHSA-gqwr-p67x-5fff
security-tracker.debian.org/tracker/CVE-2006-0082
access.redhat.com/errata/RHSA-2006:0178
bugzilla.redhat.com/show_bug.cgi?id=176837
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0178.json
cve.org/CVERecord?id=CVE-2005-4601
suse.com/security/cve/CVE-2005-4601