PT-2005-5269 · Imagemagick+1 · Imagemagick+1

Florian Weimer

·

CVE-2005-4601

·

Publicado

2005-12-31

·

Atualizado

2024-06-15

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions ImageMagick version 6.2.4.5-0.3
Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a filename that is processed by the display command.
Recommendations For ImageMagick version 6.2.4.5-0.3, consider restricting the use of the display command or sanitizing filenames to prevent the execution of arbitrary commands until a patch is available.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2005-4601
DSA-957-2
OPENSUSE-SU-2024:10597-1
RHSA-2006:0178
RHSA-2006_0178

Produtos afetados

Imagemagick
Red Hat