CVE-2006-5456
Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user...
Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.
Exploit likelihood
What each source reports
NVD Score used
5.1
Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.
- Record
CVE-2006-5456- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.
- Record
CVE-2006-5456- Updated
- 2026-11-02
EUVDEUVD-2006-5441 No score
Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.
- Record
EUVD-2006-5441- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cfvq-2qp7-r72f No score
Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user...
Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.
- Record
GHSA-cfvq-2qp7-r72f- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.
- Record
CVE-2006-5456- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-5456 No score
Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.
- Record
DEBIAN-CVE-2006-5456- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10596-1 No score
GraphicsMagick-1.3.36-1.7 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.36-1.7 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10596-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10597-1 No score
ImageMagick-7.1.0.8-1.2 on GA media
These are all security issues fixed in the ImageMagick-7.1.0.8-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10597-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
graphicsmagickDebian:12 |
before 1.1.7-9 | 1.1.7-9 |
graphicsmagickDebian:13 |
before 1.1.7-9 | 1.1.7-9 |
graphicsmagickDebian:14 |
before 1.1.7-9 | 1.1.7-9 |
imagemagickDebian:12 |
before 7:6.2.4.5.dfsg1-0.11 | 7:6.2.4.5.dfsg1-0.11 |
imagemagickDebian:13 |
before 7:6.2.4.5.dfsg1-0.11 | 7:6.2.4.5.dfsg1-0.11 |
imagemagickDebian:14 |
before 7:6.2.4.5.dfsg1-0.11 | 7:6.2.4.5.dfsg1-0.11 |
imagemagickDebian:3.1 From an advisory covering 4 CVEs |
before 6:6.0.6.2-2.8, plus listed versions 6:6.0.6.2-2.46:6.0.6.2-2.56:6.0.6.2-2.66:6.0.6.2-2.7 |
6:6.0.6.2-2.8 |
ImageMagickRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagick-c++Red Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagick-c++-develRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
Show 67 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ImageMagick-develRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagick-perlRed Hat:enterprise_linux:2.1::as From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagickRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagick-c++Red Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagick-c++-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagick-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagick-perlRed Hat:enterprise_linux:2.1::aw From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagickRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagick-c++Red Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagick-c++-develRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagick-develRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagick-perlRed Hat:enterprise_linux:2.1::es From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagickRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagick-c++Red Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagick-c++-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagick-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagick-perlRed Hat:enterprise_linux:2.1::ws From an advisory covering 3 CVEs |
before 0:5.3.8-18 | 0:5.3.8-18 |
ImageMagickRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-c++Red Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-perlRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagickRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-c++Red Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-perlRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagickRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-c++Red Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-perlRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagickRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-c++Red Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-c++-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagick-perlRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:5.5.6-24 | 0:5.5.6-24 |
ImageMagickRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-c++Red Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-c++-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-perlRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagickRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-c++Red Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-c++-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-perlRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagickRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-c++Red Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-c++-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-perlRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagickRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-c++Red Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-c++-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
ImageMagick-perlRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:6.0.7.1-16.0.3 | 0:6.0.7.1-16.0.3 |
GraphicsMagickopenSUSE:Tumbleweed From an advisory covering 17 CVEs |
before 1.3.36-1.7 | 1.3.36-1.7 |
ImageMagickopenSUSE:Tumbleweed From an advisory covering 7 CVEs |
before 7.1.0.8-1.2 | 7.1.0.8-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5456 is a medium vulnerability (CVSS 5.1) in Graphicsmagick, published October 23, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.79%, the 90th percentile. Fixed in graphicsmagick 1.1.7-9.
References
secunia.com/advisories/24196
vupen.com/english/advisories/2006/4170
packages.debian.org/changelogs/pool/main/g/graphicsmagick/graphicsmagick_1.1.7-9/changelog
secunia.com/advisories/22572
security.gentoo.org/glsa/glsa-200611-07.xml
secunia.com/advisories/22601
Show 70 moreShow less
secunia.com/advisories/24458
securityfocus.com/archive/1/452718/100/100/threaded
secunia.com/advisories/22834
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9765
exchange.xforce.ibmcloud.com/vulnerabilities/29816
secunia.com/advisories/23090
secunia.com/advisories/24284
issues.rpath.com/browse/RPL-1034
novell.com/linux/security/advisories/2006_66_imagemagick.html
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.352092
secunia.com/advisories/22819
secunia.com/advisories/22604
novell.com/linux/security/advisories/2007_3_sr.html
ubuntu.com/usn/usn-422-1
securityfocus.com/archive/1/459507/100/0/threaded
security.gentoo.org/glsa/glsa-200611-19.xml
securityfocus.com/bid/20707
secunia.com/advisories/23121
issues.rpath.com/browse/RPL-811
redhat.com/support/errata/RHSA-2007-0015.html
vupen.com/english/advisories/2006/4171
secunia.com/advisories/22998
secunia.com/advisories/24186
debian.org/security/2006/dsa-1213
osvdb.org/29990
ubuntu.com/usn/usn-372-1
secunia.com/advisories/22569
mandriva.com/security/advisories?name=MDKSA-2006:193
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210921
mandriva.com/security/advisories?name=MDKSA-2007:041
nvd.nist.gov/vuln/detail/CVE-2006-5456
github.com/advisories/GHSA-cfvq-2qp7-r72f
security-tracker.debian.org/tracker/CVE-2006-5456
access.redhat.com/errata/RHSA-2007:0015
bugzilla.redhat.com/show_bug.cgi?id=192278
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=210921
bugzilla.redhat.com/show_bug.cgi?id=217558
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0015.json
access.redhat.com/security/cve/CVE-2006-2440
bugzilla.redhat.com/show_bug.cgi?id=1618102
cve.org/CVERecord?id=CVE-2006-2440
nvd.nist.gov/vuln/detail/CVE-2006-2440
access.redhat.com/security/cve/CVE-2006-5456
cve.org/CVERecord?id=CVE-2006-5456
access.redhat.com/security/cve/CVE-2006-5868
bugzilla.redhat.com/show_bug.cgi?id=217560
cve.org/CVERecord?id=CVE-2006-5868
nvd.nist.gov/vuln/detail/CVE-2006-5868
suse.com/security/cve/CVE-2006-3744
suse.com/security/cve/CVE-2006-5456
suse.com/security/cve/CVE-2007-1797
suse.com/security/cve/CVE-2007-4985
suse.com/security/cve/CVE-2007-4988
suse.com/security/cve/CVE-2008-1096
suse.com/security/cve/CVE-2008-1097
suse.com/security/cve/CVE-2016-7800
suse.com/security/cve/CVE-2016-7996
suse.com/security/cve/CVE-2016-7997
suse.com/security/cve/CVE-2016-9830
suse.com/security/cve/CVE-2017-10794
suse.com/security/cve/CVE-2017-10799
suse.com/security/cve/CVE-2017-10800
suse.com/security/cve/CVE-2017-6335
suse.com/security/cve/CVE-2017-8350
suse.com/security/cve/CVE-2020-12672
suse.com/security/cve/CVE-2005-4601
suse.com/security/cve/CVE-2006-0082
suse.com/security/cve/CVE-2007-4987
suse.com/security/cve/CVE-2018-9135