Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or (2) the (a) colors or (b) comments field in a crafted XWD image, which results in a heap-based overflow in the ReadXWDImage function, different issues than CVE-2007-1667.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade graphicsmagickUpgrade imagemagick | Jul 30, 2024 | Apr 2, 2007 |
| Gentoo Linux | — | Upgrade media-gfx/imagemagick. | Oct 30, 2017 | Apr 2, 2007 |
| Oracle_linux | — | Upgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-devel | Oct 16, 2024 | Apr 2, 2007 |
| Suse | — | Upgrade libMagickCore1Upgrade libMagickCore1-32bitUpgrade libMagick++-7_Q16HDRI5Upgrade libMagickWand1Upgrade libMagick++-develUpgrade ImageMagick-config-7-upstream-openUpgrade ImageMagickUpgrade perl-GraphicsMagickUpgrade ImageMagick-config-7-upstream-websafeUpgrade ImageMagick-develUpgrade libMagickWand-7_Q16HDRI10Upgrade libMagickWand1-32bitUpgrade ImageMagick-extraUpgrade ImageMagick-config-7-upstream-limitedUpgrade GraphicsMagickUpgrade ImageMagick-config-7-SUSEUpgrade perl-PerlMagickUpgrade libMagick++1Upgrade libGraphicsMagick2Upgrade ImageMagick-docUpgrade ImageMagick-config-7-upstream-secureUpgrade libMagickCore-7_Q16HDRI10 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libmagick9 | Nov 8, 2024 | Apr 2, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub