CVE-2006-4144

ImageMagick - Denial of Service and Possible Remote Code Execution via Integer Overflow in ReadSGIImage

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-4144. PoCs published by Damian Put.

AI-analyzed exploit summary The provided text describes a remote heap buffer-overflow vulnerability in ImageMagick versions up to 6.2.8, allowing arbitrary code execution. It references ExploitDB and a binary exploit but does not contain actual exploit code.

Description

Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Damian Put · textdoslinux

https://www.exploit-db.com/exploits/28383

View Code ZIP pw:eip

The provided text describes a remote heap buffer-overflow vulnerability in ImageMagick versions up to 6.2.8, allowing arbitrary code execution. It references ExploitDB and a binary exploit but does not contain actual exploit code.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Moderate

Reliability

Theoretical

Target: ImageMagick 6.x up to 6.2.8

No auth needed

Prerequisites: Vulnerable version of ImageMagick · Ability to deliver a malicious image file

MITRE ATT&CK

T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (25)

Core 25

Core References

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/21679

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/28372

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/19507

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/21671

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/21832

Exploit x_refsource_misc

http://www.overflow.pl/adv/imsgiheap.txt

Vendor Advisory vendor-advisory x_refsource_suse

http://www.novell.com/linux/security/advisories/2006_50_imagemagick.html

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11129

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/443362/100/0/threaded

Issue Tracking x_refsource_confirm

https://issues.rpath.com/browse/RPL-605

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDKSA-2006:155

Third Party Advisory vendor-advisory x_refsource_gentoo

http://security.gentoo.org/glsa/glsa-200609-14.xml

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/22096

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/21621

Vendor Advisory vendor-advisory x_refsource_sgi

ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/usn-337-1

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2006-0633.html

Patch, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/21462

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1016699

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/22998

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2006/dsa-1213

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/1385

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/22036

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/443208/100/0/threaded

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/21525

Scores

EPSS 0.1021

EPSS Percentile 95.1%

Details

Status published

Products (29)

imagemagick/imagemagick 6.0.1

imagemagick/imagemagick 6.0.2

imagemagick/imagemagick 6.0.2.5

imagemagick/imagemagick 6.0.3

imagemagick/imagemagick 6.0.4

imagemagick/imagemagick 6.0.5

imagemagick/imagemagick 6.0.6

imagemagick/imagemagick 6.0.7

imagemagick/imagemagick 6.0.8

imagemagick/imagemagick 6.1

... and 19 more

Published Aug 15, 2006

Tracked Since Feb 18, 2026