The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick allow remote attackers to cause a denial of service (infinite loop) by converting a circularly defined SVG file.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | amazon-linux-upgrade-imagemagick | Jun 23, 2016 | Jun 16, 2016 |
| Centos_linux | — | centos-upgrade-imagemagickcentos-upgrade-imagemagick-ccentos-upgrade-imagemagick-c-develcentos-upgrade-imagemagick-develcentos-upgrade-imagemagick-doccentos-upgrade-imagemagick-perl | Jul 22, 2016 | Jun 16, 2016 |
| Debian | debian-upgrade-graphicsmagick | Dec 26, 2016 | Jun 16, 2016 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-imagemagickhuawei-euleros-2_0_sp1-upgrade-imagemagick-c++huawei-euleros-2_0_sp1-upgrade-imagemagick-perl | Nov 30, 2017 | Feb 27, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-imagemagickoracle-linux-upgrade-imagemagick-coracle-linux-upgrade-imagemagick-c-develoracle-linux-upgrade-imagemagick-develoracle-linux-upgrade-imagemagick-docoracle-linux-upgrade-imagemagick-perl | Jun 16, 2016 | Jun 16, 2016 |
| Redhat_linux | — | redhat-upgrade-imagemagickredhat-upgrade-imagemagick-credhat-upgrade-imagemagick-c-develredhat-upgrade-imagemagick-debuginforedhat-upgrade-imagemagick-develredhat-upgrade-imagemagick-docredhat-upgrade-imagemagick-perl | Jul 29, 2016 | Jun 16, 2016 |
| Suse | — | suse-upgrade-graphicsmagicksuse-upgrade-libgraphicsmagick2suse-upgrade-perl-graphicsmagick | Jul 26, 2016 | Jun 16, 2016 |
| Ubuntu | ubuntu-upgrade-graphicsmagick | Nov 19, 2024 | Feb 27, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub