CVE-2006-5456: Graphicsmagick

Medium severity, CVSS 5.1. EPSS: 3.8% chance of exploitation in the next 30 days.

Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c.

Affected products

• Graphicsmagick Graphicsmagick: up to and including 1.1.6; version 1.0 only; version 1.0.6 only; version 1.1 only; version 1.1.3 only; version 1.1.4 only; …
• ImageMagick ImageMagick: version 6.0.7 only

Published 2006-10-23. Last modified 2026-06-16.