In ImageMagick 7.0.6-10, there is a heap-based buffer overflow in the TracePoint() function in MagickCore/draw.c.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Nov 18, 2017 | Aug 29, 2017 |
| Gentoo Linux | — | Upgrade media-gfx/imagemagick. | Nov 13, 2017 | Aug 29, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 29, 2017 |
| Suse | — | Upgrade libMagickCore1Upgrade libMagick++1Upgrade libMagickWand1-32bitUpgrade libmagickcore-6_q16-1-32bitUpgrade libMagickCore1-32bitUpgrade graphicsmagickUpgrade perl-graphicsmagickUpgrade libmagickcore-6_q16-1Upgrade perl-perlmagickUpgrade libMagickWand1Upgrade libmagick-6_q16-3Upgrade imagemagick-config-6-upstreamUpgrade imagemagickUpgrade libGraphicsMagick2Upgrade imagemagick-config-6-suseUpgrade imagemagick-develUpgrade libmagickwand-6_q16-1Upgrade libmagick-devel | Jun 30, 2018 | Aug 29, 2017 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-2-extraUpgrade imagemagick-6.q16Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-3Upgrade libmagickcore5Upgrade libmagick++-6.q16-5v5Upgrade libmagick++5Upgrade imagemagickUpgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-3-extra | Jun 19, 2018 | Aug 29, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub