The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue function in coders/svg.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Jul 19, 2017 | Jul 5, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 21, 2017 |
| Suse | — | Upgrade ImageMagickUpgrade libMagickCore1-32bitUpgrade perl-PerlMagickUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-develUpgrade libMagickWand-6_Q16-1Upgrade ImageMagick-develUpgrade libMagick++-6_Q16-3Upgrade libMagickCore1Upgrade libMagickWand1Upgrade libMagickCore-6_Q16-1Upgrade ImageMagick-config-6-upstreamUpgrade libMagick++1Upgrade ImageMagick-config-6-SUSEUpgrade libMagickWand1-32bit | May 3, 2018 | Jul 5, 2017 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-3Upgrade libmagick++5Upgrade libmagickcore-6.q16-2Upgrade imagemagickUpgrade libmagick++-6.q16-7Upgrade imagemagick-6.q16Upgrade libmagickcore5Upgrade libmagick++-6.q16-5v5 | Jul 24, 2017 | Jul 5, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub