coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Mar 2, 2017 | Feb 6, 2017 |
| Freebsd | — | Upgrade ImageMagickUpgrade ImageMagick7Upgrade ImageMagick7-nox11Upgrade ImageMagick-nox11 | May 25, 2017 | May 25, 2017 |
| Gentoo Linux | — | Upgrade media-gfx/imagemagick. | Oct 30, 2017 | Mar 24, 2017 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.7.4-0.175.3.18.0.1.0 on Solaris 11.3 | May 29, 2017 | Mar 24, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 7, 2017 |
| Suse | — | Upgrade libMagickCore-6_Q16-1Upgrade libMagickWand1-32bitUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagickUpgrade libMagick++-6_Q16-3Upgrade perl-GraphicsMagickUpgrade libGraphicsMagick2Upgrade ImageMagick-config-6-upstreamUpgrade perl-PerlMagickUpgrade GraphicsMagickUpgrade libMagickCore1-32bitUpgrade libMagickWand1Upgrade libMagick++-develUpgrade libMagickCore1Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++1Upgrade ImageMagick-develUpgrade libMagickWand-6_Q16-1 | Feb 7, 2017 | Feb 6, 2017 |
| Ubuntu | — | Upgrade imagemagick-6.q16Upgrade libmagickcore4Upgrade libmagick++4Upgrade libmagickcore-6.q16-2Upgrade imagemagickUpgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5-extraUpgrade libmagick++5Upgrade libmagickcore4-extraUpgrade libmagickcore5 | Mar 9, 2017 | Feb 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub