CVE-2006-4144

CVE-2006-4144 describes an integer overflow vulnerability in the ReadSGIImage function of ImageMagick versions prior to 6.2.9. This flaw, triggered by large bytes_per_pixel, columns, and rows values in SGI image files, can lead to a heap-based buffer overflow. The vulnerability has a CVSS score of 2.6, indicating a low severity, as it requires user assistance (e.g., opening a malicious file) and primarily results in a denial of service (crash), though arbitrary code execution is a possibility. While not actively exploited in the wild and lacking Metasploit or Nuclei modules, a proof-of-concept exploit for a remote heap buffer overflow is available on ExploitDB. Community discussion and media coverage for this CVE are minimal.