Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4 and 6.x before 6.0.6.2 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI (2) BMP or (3) DIB files.