ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to "Conditional jump or move depends on uninitialised value(s)."
CVSS Details
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Feb 25, 2019 | Oct 12, 2017 |
| Gentoo Linux | — | Upgrade media-gfx/imagemagick. | Nov 13, 2017 | Oct 12, 2017 |
| Huawei Euleros 2_0_sp1 | — | — | Nov 30, 2017 | Oct 12, 2017 |
| Huawei Euleros 2_0_sp2 | — | — | Nov 30, 2017 | Oct 12, 2017 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.9.19-0.175.3.26.0.4.0 on Solaris 11.3 | Mar 21, 2018 | Oct 12, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 9, 2017 |
| Suse | — | Upgrade ImageMagickUpgrade perl-PerlMagickUpgrade ImageMagick-develUpgrade libMagickCore1Upgrade libMagick++-develUpgrade libMagickWand-6_Q16-1Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickWand1-32bitUpgrade libMagick++-6_Q16-3Upgrade libMagickWand1Upgrade libMagickCore-6_Q16-1Upgrade ImageMagick-config-6-upstreamUpgrade libMagickCore1-32bitUpgrade ImageMagick-config-6-SUSEUpgrade libMagick++1 | Jan 4, 2018 | Oct 12, 2017 |
| Ubuntu | — | Upgrade libmagickcore5-extraUpgrade libmagick++-6.q16-7Upgrade libmagickcore5Upgrade libmagick++5Upgrade imagemagickUpgrade libmagick++-6.q16-5v5Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-3 | Jun 19, 2018 | Oct 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub