When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage() function in coders/uil.c.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Dec 5, 2017 | Jul 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Jul 23, 2017 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Jul 23, 2017 |
| Huawei Euleros 2_0_sp5 | — | — | Feb 3, 2021 | Jul 23, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 16, 2017 |
| Suse | — | Upgrade libMagick++-develUpgrade ImageMagick-config-6-upstreamUpgrade ImageMagick-config-6-SUSEUpgrade perl-GraphicsMagickUpgrade libMagickCore-6_Q16-1Upgrade libMagickWand1Upgrade ImageMagickUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickWand-6_Q16-1Upgrade libMagickCore1-32bitUpgrade libMagickCore1Upgrade libMagickWand1-32bitUpgrade ImageMagick-develUpgrade GraphicsMagickUpgrade libMagick++-6_Q16-3Upgrade perl-PerlMagickUpgrade libMagick++1Upgrade libGraphicsMagick2 | Feb 27, 2018 | Jul 22, 2017 |
| Ubuntu | — | Upgrade libmagickcore5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-2Upgrade libmagick++-6.q16-7Upgrade libmagick++5Upgrade imagemagick-6.q16Upgrade libmagickcore5-extraUpgrade imagemagick | Jun 19, 2018 | Jul 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub