CVE-2005-0005: Debian Linux

High severity, CVSS 7.5. EPSS: 4.4% chance of exploitation in the next 30 days.

Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers.

Affected products

• Debian Debian Linux: version 3.0 only
• Gentoo Linux: version 0.5 only; version 0.7 only; version 1.1a only; version 1.2 only; version 1.4 only
• Graphicsmagick Graphicsmagick: version 1.0 only; version 1.0.6 only; version 1.1 only; version 1.1.3 only; version 1.1.4 only
• ImageMagick ImageMagick: version 5.3.3 only; version 5.4.3 only; version 5.4.7 only; version 6.0 only; version 6.0.1 only; version 6.0.2 only; …
• Sgi Propack: version 3.0 only
• Suse Suse Linux: version 8.0 only; version 8.1 only; version 8.2 only; version 9.0 only; version 9.1 only; version 9.2 only

Published 2005-05-02. Last modified 2026-06-16.