The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick allow remote attackers to cause a denial of service (infinite loop) by converting a circularly defined SVG file.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade ImageMagick | Jun 23, 2016 | Jun 16, 2016 |
| Centos_linux | — | Upgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-doc | Jul 22, 2016 | Jun 16, 2016 |
| Debian | — | Upgrade graphicsmagick | Dec 26, 2016 | Jun 16, 2016 |
| Huawei Euleros 2_0_sp1 | — | — | Nov 30, 2017 | Feb 27, 2017 |
| Oracle_linux | — | Upgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-devel | Jun 16, 2016 | Jun 16, 2016 |
| Redhat_linux | — | Upgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade ImageMagick-perlNo solution existsUpgrade ImageMagick-c++Upgrade ImageMagick | Jul 29, 2016 | Jun 16, 2016 |
| Suse | — | Upgrade libGraphicsMagick2Upgrade GraphicsMagickUpgrade perl-GraphicsMagick | Jul 26, 2016 | Jun 16, 2016 |
| Ubuntu | — | Upgrade graphicsmagick | Nov 19, 2024 | Feb 27, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub