CVE-2003-0555

CVE-2003-0555 describes a denial-of-service and potential arbitrary code execution vulnerability in ImageMagick 5.4.3.x and earlier versions. Attackers can trigger this by providing a specially crafted filename, specifically "%x", which may exploit a format string vulnerability. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impact. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.