When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage() function in coders/uil.c.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Dec 5, 2017 | Jul 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Jul 23, 2017 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Jul 23, 2017 |
| Huawei Euleros 2_0_sp5 | — | — | Feb 3, 2021 | Jul 23, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 16, 2017 |
| Suse | — | Upgrade libGraphicsMagick2Upgrade perl-PerlMagickUpgrade libMagick++1Upgrade libMagickWand-6_Q16-1Upgrade libMagickWand1-32bitUpgrade ImageMagick-develUpgrade libMagick++-6_Q16-3Upgrade libMagickCore1Upgrade libMagickCore1-32bitUpgrade libMagickCore-6_Q16-1-32bitUpgrade GraphicsMagickUpgrade libMagick++-develUpgrade ImageMagick-config-6-upstreamUpgrade ImageMagick-config-6-SUSEUpgrade perl-GraphicsMagickUpgrade libMagickWand1Upgrade ImageMagickUpgrade libMagickCore-6_Q16-1 | Feb 27, 2018 | Jul 22, 2017 |
| Ubuntu | — | Upgrade imagemagickUpgrade libmagick++5Upgrade libmagickcore-6.q16-2Upgrade imagemagick-6.q16Upgrade libmagickcore5-extraUpgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-3Upgrade libmagickcore5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-3-extra | Jun 19, 2018 | Jul 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub