ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c, allowing remote attackers to cause a denial of service via a crafted file.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Feb 25, 2019 | Sep 11, 2017 |
| Gentoo Linux | — | Upgrade media-gfx/imagemagick. | Nov 13, 2017 | Sep 11, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 31, 2017 |
| Suse | — | Upgrade libmagickcore-6_q16-1-32bitUpgrade libMagickWand1Upgrade libmagick-6_q16-3Upgrade libmagickwand-6_q16-1Upgrade perl-perlmagickUpgrade imagemagick-config-6-suseUpgrade libmagickcore-6_q16-1Upgrade imagemagick-config-6-upstreamUpgrade libMagickWand1-32bitUpgrade libMagickCore1-32bitUpgrade graphicsmagickUpgrade imagemagickUpgrade imagemagick-develUpgrade perl-graphicsmagickUpgrade libMagick++1Upgrade libMagickCore1Upgrade libGraphicsMagick2Upgrade libmagick-devel | Jan 10, 2018 | Sep 11, 2017 |
| Ubuntu | — | Upgrade libmagick++-6.q16-5v5Upgrade imagemagick-6.q16Upgrade imagemagickUpgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3Upgrade libmagick++5Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-2Upgrade libmagickcore5 | Jun 19, 2018 | Sep 11, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub