ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c, allowing remote attackers to cause a denial of service via a crafted file.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Feb 25, 2019 | Sep 11, 2017 |
| Gentoo Linux | — | Upgrade media-gfx/imagemagick. | Nov 13, 2017 | Sep 11, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 31, 2017 |
| Suse | — | Upgrade libMagickWand1Upgrade libmagick-6_q16-3Upgrade perl-perlmagickUpgrade libmagickcore-6_q16-1-32bitUpgrade libmagickcore-6_q16-1Upgrade imagemagick-config-6-upstreamUpgrade imagemagick-config-6-suseUpgrade libmagickwand-6_q16-1Upgrade imagemagick-develUpgrade libMagickWand1-32bitUpgrade libMagickCore1Upgrade perl-graphicsmagickUpgrade libMagick++1Upgrade libmagick-develUpgrade imagemagickUpgrade graphicsmagickUpgrade libGraphicsMagick2Upgrade libMagickCore1-32bit | Jan 10, 2018 | Sep 11, 2017 |
| Ubuntu | — | Upgrade libmagick++5Upgrade libmagick++-6.q16-5v5Upgrade imagemagickUpgrade libmagickcore-6.q16-2-extraUpgrade libmagick++-6.q16-7Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-3Upgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5Upgrade libmagickcore-6.q16-2 | Jun 19, 2018 | Sep 11, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub