Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Mar 31, 2017 | Dec 2, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 2, 2016 |
| Suse | — | Upgrade libMagick++1Upgrade libMagickCore1Upgrade imagemagick-config-6-upstreamUpgrade libmagickcore-6_q16-1-32bitUpgrade imagemagickUpgrade libmagick-develUpgrade libmagickcore-6_q16-1Upgrade libGraphicsMagick2Upgrade perl-graphicsmagickUpgrade libmagick-6_q16-3Upgrade libMagickWand1-32bitUpgrade graphicsmagickUpgrade libMagickCore1-32bitUpgrade perl-perlmagickUpgrade imagemagick-config-6-suseUpgrade libMagickWand1Upgrade imagemagick-develUpgrade libmagickwand-6_q16-1 | Feb 7, 2017 | Feb 6, 2017 |
| Ubuntu | — | Upgrade imagemagick | Nov 19, 2024 | Mar 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub