Every CVE Search/ Get API key

CVE-2006-4144

Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user...

2.6 LowPublic exploitFix available

Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.

Exploit likelihood

11.0%Down 16.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.6

Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.

Record
CVE-2006-4144
CVSS 2.0
2.6 LowAV:N/AC:H/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.

Record
CVE-2006-4144
Updated
2026-11-02
EUVDEUVD-2006-4134 No score

Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.

Record
EUVD-2006-4134
Updated
2026-11-03
GitHub AdvisoriesGHSA-468h-chpc-m7c8 No score

Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user...

Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.

Record
GHSA-468h-chpc-m7c8
Updated
2026-11-02
OSV No score

Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.

Record
CVE-2006-4144
Updated
2026-11-02
OSVDEBIAN-CVE-2006-4144 No score

Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.

Record
DEBIAN-CVE-2006-4144
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
graphicsmagick
Debian:12
 before 1.1.7-7
1.1.7-7
graphicsmagick
Debian:13
 before 1.1.7-7
1.1.7-7
graphicsmagick
Debian:14
 before 1.1.7-7
1.1.7-7
imagemagick
Debian:12
 before 7:6.2.4.5.dfsg1-0.10
7:6.2.4.5.dfsg1-0.10
imagemagick
Debian:13
 before 7:6.2.4.5.dfsg1-0.10
7:6.2.4.5.dfsg1-0.10
imagemagick
Debian:14
 before 7:6.2.4.5.dfsg1-0.10
7:6.2.4.5.dfsg1-0.10
imagemagick
Debian:3.1
From an advisory covering 4 CVEs
 before 6:6.0.6.2-2.8, plus listed versions
6:6.0.6.2-2.46:6.0.6.2-2.56:6.0.6.2-2.66:6.0.6.2-2.7
6:6.0.6.2-2.8
ImageMagick
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-c++
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-c++-devel
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
Show 45 moreShow less
Affected packages
PackageAffectedFixed
ImageMagick-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-devel
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-perl
Red Hat:enterprise_linux:3::as
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-c++
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-c++-devel
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-devel
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-perl
Red Hat:enterprise_linux:3::desktop
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-c++
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-c++-devel
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-devel
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-perl
Red Hat:enterprise_linux:3::es
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-c++
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-c++-devel
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-devel
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick-perl
Red Hat:enterprise_linux:3::ws
From an advisory covering 3 CVEs
 before 0:5.5.6-20
0:5.5.6-20
ImageMagick
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-c++
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-c++-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-perl
Red Hat:enterprise_linux:4::as
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-c++
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-c++-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-perl
Red Hat:enterprise_linux:4::desktop
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-c++
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-c++-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-perl
Red Hat:enterprise_linux:4::es
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-c++
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-c++-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16
ImageMagick-perl
Red Hat:enterprise_linux:4::ws
From an advisory covering 3 CVEs
 before 0:6.0.7.1-16
0:6.0.7.1-16

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBImageMagick 6.x - '.SGI' Image File Remote Heap Buffer Overflow2006-08-14

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-4144 is a low vulnerability (CVSS 2.6) in Imagemagick, published August 15, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.0%, the 95th percentile. Fixed in graphicsmagick 1.1.7-7.

References

Show 37 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open