Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF file, which triggers a buffer overflow. NOTE: some of these details are obtained from third party information.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ImageMagick-c++-develUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade ImageMagick-devel | Dec 1, 2016 | Jun 2, 2009 |
| Debian | — | Upgrade graphicsmagickUpgrade imagemagick | Jul 30, 2024 | Jun 2, 2009 |
| Gentoo Linux | — | Upgrade media-gfx/graphicsmagick.Upgrade media-gfx/imagemagick. | Oct 30, 2017 | Jun 2, 2009 |
| Oracle_linux | — | Upgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade ImageMagick | Oct 16, 2024 | Jun 2, 2009 |
| Suse | — | Upgrade libMagickCore1Upgrade libMagickCore1-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libmagick9Upgrade libmagick10Upgrade libmagickcore1 | Nov 8, 2024 | Jun 2, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub