Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-ak8s-9hyp-47fa
Vulnerability ID VCID-ak8s-9hyp-47fa
Aliases CVE-2005-0397
Summary A format string vulnerability exists in ImageMagick that may allow an attacker to execute arbitrary code.
Status Published
Exploitability 0.5
Weighted Severity 6.8
Risk 3.4
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.04522 https://api.first.org/data/v1/epss?cve=CVE-2005-0397
epss 0.04522 https://api.first.org/data/v1/epss?cve=CVE-2005-0397
epss 0.04522 https://api.first.org/data/v1/epss?cve=CVE-2005-0397
epss 0.04522 https://api.first.org/data/v1/epss?cve=CVE-2005-0397
epss 0.04522 https://api.first.org/data/v1/epss?cve=CVE-2005-0397
epss 0.04522 https://api.first.org/data/v1/epss?cve=CVE-2005-0397
epss 0.04522 https://api.first.org/data/v1/epss?cve=CVE-2005-0397
epss 0.04522 https://api.first.org/data/v1/epss?cve=CVE-2005-0397
epss 0.04522 https://api.first.org/data/v1/epss?cve=CVE-2005-0397
epss 0.04522 https://api.first.org/data/v1/epss?cve=CVE-2005-0397
epss 0.04522 https://api.first.org/data/v1/epss?cve=CVE-2005-0397
epss 0.04522 https://api.first.org/data/v1/epss?cve=CVE-2005-0397
epss 0.04522 https://api.first.org/data/v1/epss?cve=CVE-2005-0397
epss 0.04522 https://api.first.org/data/v1/epss?cve=CVE-2005-0397
epss 0.04522 https://api.first.org/data/v1/epss?cve=CVE-2005-0397
cvssv2 7.5 https://nvd.nist.gov/vuln/detail/CVE-2005-0397
Reference id Reference type URL
http://bugs.gentoo.org/show_bug.cgi?id=83542
http://marc.info/?l=bugtraq&m=110987256010857&w=2
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0397.json
https://api.first.org/data/v1/epss?cve=CVE-2005-0397
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0397
https://exchange.xforce.ibmcloud.com/vulnerabilities/19586
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10302
http://www.debian.org/security/2005/dsa-702
http://www.gentoo.org/security/en/glsa/glsa-200503-11.xml
http://www.novell.com/linux/security/advisories/2005_17_imagemagick.html
http://www.redhat.com/support/errata/RHSA-2005-070.html
http://www.redhat.com/support/errata/RHSA-2005-320.html
1617515 https://bugzilla.redhat.com/show_bug.cgi?id=1617515
297990 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=297990
cpe:2.3:a:imagemagick:imagemagick:5.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:imagemagick:imagemagick:5.2:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:5.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:imagemagick:imagemagick:5.3:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:5.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:imagemagick:imagemagick:5.4:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:5.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:imagemagick:imagemagick:5.5:*:*:*:*:*:*:*
CVE-2005-0397 https://nvd.nist.gov/vuln/detail/CVE-2005-0397
GLSA-200503-11 https://security.gentoo.org/glsa/200503-11
RHSA-2005:070 https://access.redhat.com/errata/RHSA-2005:070
RHSA-2005:320 https://access.redhat.com/errata/RHSA-2005:320
USN-90-1 https://usn.ubuntu.com/90-1/
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2005-0397
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.89108
EPSS Score 0.04522
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:10:27.301721+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/200503-11 38.0.0