ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagick-c++-devel | Dec 1, 2016 | Jun 5, 2012 |
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Jun 5, 2012 |
| Gentoo Linux | — | Upgrade media-gfx/imagemagick. | Oct 30, 2017 | Jun 5, 2012 |
| Oracle Solaris | — | Upgrade system/network/routing/quagga to version 0.99.19-0.175.0.10.0.1.0 on Solaris 11.0 | May 29, 2017 | Jun 5, 2012 |
| Oracle_linux | — | Upgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-doc | Oct 16, 2024 | Jun 5, 2012 |
| Suse | — | Upgrade libMagickCore-6_Q16-1Upgrade ImageMagick-docUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagickWand-7_Q16HDRI10Upgrade libMagick++1Upgrade libMagickCore-7_Q16HDRI10Upgrade ImageMagick-extraUpgrade libMagickCore1Upgrade ImageMagick-config-7-SUSEUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-develUpgrade ImageMagick-config-7-upstream-openUpgrade libMagickWand-6_Q16-1Upgrade ImageMagick-develUpgrade ImageMagick-config-7-upstream-websafeUpgrade ImageMagick-config-7-upstream-limitedUpgrade libMagick++-7_Q16HDRI5Upgrade ImageMagickUpgrade ImageMagick-config-7-upstream-secureUpgrade perl-PerlMagickUpgrade libMagickWand1-32bitUpgrade libMagickWand1Upgrade libMagickCore1-32bitUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-7_Q16HDRI6Upgrade libMagick++-7_Q16HDRI4 | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libmagick++2Upgrade libmagick++4Upgrade imagemagickUpgrade libmagick++3 | Nov 8, 2024 | Jun 5, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub