ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (divide-by-zero error) by crafting an XWD image file in which the header indicates neither LSB first nor MSB first.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagickUpgrade imagemagick6 | Aug 22, 2024 | Apr 23, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-devel | Oct 28, 2020 | Apr 23, 2019 |
| Amazon_linux | — | Upgrade php70-pecl-imagickUpgrade php56-pecl-imagickUpgrade php71-pecl-imagickUpgrade php54-pecl-imagickUpgrade ImageMagickUpgrade php55-pecl-imagickUpgrade php-pecl-imagickUpgrade php72-pecl-imagick | Jul 18, 2020 | Apr 23, 2019 |
| Centos_linux | — | Upgrade ImageMagick-develUpgrade inkscape-viewUpgrade autotrace-debuginfoUpgrade inkscape-docsUpgrade inkscape-debuginfoUpgrade ImageMagick-c++-develUpgrade autotrace-develUpgrade autotraceUpgrade ImageMagick-perlUpgrade inkscapeUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick | Apr 1, 2020 | Apr 23, 2019 |
| Debian | — | Upgrade imagemagick | Jul 2, 2020 | Apr 23, 2019 |
| Freebsd | — | Upgrade ImageMagick7Upgrade ImageMagick6Upgrade ImageMagick6-nox11Upgrade ImageMagick7-nox11 | May 31, 2019 | May 30, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.57-11.4.13.0.1.1.0 on Solaris 11.4 | Sep 17, 2019 | Apr 23, 2019 |
| Oracle_linux | — | Upgrade emacs-commonUpgrade ImageMagick-docUpgrade inkscape-viewUpgrade emacs-elUpgrade inkscape-docsUpgrade ImageMagickUpgrade emacs-terminalUpgrade ImageMagick-perlUpgrade emacs-filesystemUpgrade emacsUpgrade ImageMagick-c++Upgrade autotraceUpgrade emacs-noxUpgrade ImageMagick-c++-develUpgrade autotrace-develUpgrade inkscapeUpgrade ImageMagick-devel | Oct 5, 2022 | Apr 14, 2019 |
| Redhat_linux | — | Upgrade autotraceUpgrade autotrace-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-perlUpgrade inkscapeUpgrade inkscape-docsNo solution existsUpgrade ImageMagick | Apr 1, 2020 | Apr 23, 2019 |
| Suse | — | Upgrade libMagick++-develUpgrade imagemagick-config-7-upstreamUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagickCore-6_Q16-1-32bitUpgrade perl-PerlMagickUpgrade libmagick-devel-32bitUpgrade libMagick++-6_Q16-3Upgrade libMagick++-7_Q16HDRI4Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade libMagickWand-6_Q16-1Upgrade ImageMagickUpgrade libMagickCore-7_Q16HDRI6Upgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade imagemagick-devel-32bitUpgrade libMagickCore-6_Q16-1Upgrade ImageMagick-extraUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-config-7-SUSEUpgrade libmagick-7_q16hdri4-32bit | Jun 25, 2019 | Apr 23, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-6Upgrade imagemagick-6.q16Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade imagemagickUpgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2-extraUpgrade imagemagick-common (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-3Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagick++-6.q16-7 | Jun 25, 2019 | Apr 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub