The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Mar 31, 2017 | Jul 11, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 20, 2017 |
| Suse | — | Upgrade libMagickCore1-32bitUpgrade libGraphicsMagick2Upgrade ImageMagick-config-6-SUSEUpgrade GraphicsMagickUpgrade perl-PerlMagickUpgrade ImageMagickUpgrade libMagickWand-6_Q16-1Upgrade libMagick++-develUpgrade libMagick++-6_Q16-3Upgrade libMagickWand1-32bitUpgrade ImageMagick-config-6-upstreamUpgrade libMagickWand1Upgrade perl-GraphicsMagickUpgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-develUpgrade libMagickCore1Upgrade libMagickCore-6_Q16-1Upgrade libMagick++1 | Jul 26, 2016 | Jul 11, 2016 |
| Ubuntu | — | Upgrade libmagick++5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore4-extraUpgrade libmagickcore-6.q16-2Upgrade imagemagickUpgrade imagemagick-6.q16Upgrade libmagickcore5Upgrade libmagick++-6.q16-5v5Upgrade libmagick++4Upgrade libmagickcore5-extraUpgrade libmagickcore4 | Nov 21, 2016 | Jul 11, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub