← Vulnerability feed

Vulnerability record · CVE-2005-0759 · published 23 March 2005

CVE-2005-0759: Imagemagick vulnerability

Imagemagick · Imagemagick

ImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image with an invalid tag.

5.0 CVSS 2.0 Medium EPSS 1.8% · top 21.9%
5.0CVSS 2.0 base score
1.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

ImageMagick before 6.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image with an invalid tag.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://securitytracker.com/id?1013550 PatchVendor Advisory
http://www.debian.org/security/2005/dsa-702 PatchVendor Advisory
http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html PatchVendor Advisory
http://www.securityfocus.com/bid/12875 PatchVendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11022
https://rhn.redhat.com/errata/RHSA-2005-070.html PatchVendor Advisory
http://securitytracker.com/id?1013550 PatchVendor Advisory
http://www.debian.org/security/2005/dsa-702 PatchVendor Advisory
http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html PatchVendor Advisory
http://www.securityfocus.com/bid/12875 PatchVendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11022
https://rhn.redhat.com/errata/RHSA-2005-070.html PatchVendor Advisory

Track CVE-2005-0759 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.4CVE-2016-3714ImageMagick coders allow command execution via crafted imageImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 fail to validate input in multiple coders (EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, PLT), allo…KEVEPSS 97%analysed5.5CVE-2016-3718ImageMagick HTTP/FTP coders allow server-side request forgery via crafted imageImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 mishandles the HTTP and FTP coders, letting a crafted image trigger server-side request forgery. A…KEVEPSS 77%analysed5.5CVE-2016-3715ImageMagick EPHEMERAL coder allows arbitrary file deletionThe EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 lets a crafted image cause deletion of arbitrary files. This is part of the…KEVEPSS 75%analysed10.0CVE-2005-3625Easy software products cups vulnerabilityXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of servic…EPSS 3.8%10.0CVE-2004-0981Imagemagick vulnerabilityBuffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file.EPSS 5.8%10.0CVE-2004-0226Midnight commander vulnerabilityMultiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.EPSS 3.9%10.0CVE-2004-0234Clearswift mailsweeper memory buffer overflow vulnerabilityMultiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow…EPSS 10%10.0CVE-2004-0507Ethereal group ethereal vulnerabilityBuffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execute arbitra…EPSS 7.6%

Source: NIST National Vulnerability Database (record CVE-2005-0759), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.