Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerability than CVE-2014-9823.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Mar 31, 2017 | Jul 11, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 30, 2017 |
| Suse | — | Upgrade libGraphicsMagick2Upgrade perl-GraphicsMagickUpgrade libMagick++1Upgrade GraphicsMagickUpgrade perl-PerlMagickUpgrade ImageMagick-config-6-upstreamUpgrade libMagickWand1Upgrade libMagick++-develUpgrade ImageMagick-develUpgrade libMagickCore1Upgrade libMagickCore1-32bitUpgrade libMagickCore-6_Q16-1Upgrade libMagickWand1-32bitUpgrade libMagick++-6_Q16-3Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickWand-6_Q16-1Upgrade ImageMagickUpgrade ImageMagick-config-6-SUSE | Jul 26, 2016 | Jul 11, 2016 |
| Ubuntu | — | Upgrade libmagickcore5-extraUpgrade imagemagickUpgrade libmagickcore-6.q16-2Upgrade libmagick++5Upgrade libmagick++4Upgrade imagemagick-6.q16Upgrade libmagickcore5Upgrade libmagickcore4Upgrade libmagickcore4-extraUpgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-5v5 | Nov 21, 2016 | Jul 11, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub