In ImageMagick 7.0.5-5, the ReadICONImage function in icon.c:452 allows attackers to cause a denial of service (memory leak) via a crafted file.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Jun 25, 2017 | Jun 2, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 28, 2017 |
| Suse | — | Upgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-6_Q16-1Upgrade libMagick++1Upgrade libMagick++-develUpgrade libGraphicsMagick2Upgrade ImageMagick-develUpgrade libMagickWand-6_Q16-1Upgrade GraphicsMagickUpgrade perl-GraphicsMagickUpgrade libMagick++-6_Q16-3Upgrade perl-PerlMagickUpgrade libMagickWand1-32bitUpgrade libMagickCore1-32bitUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagickUpgrade libMagickWand1Upgrade libMagickCore1Upgrade libMagickCore-6_Q16-1-32bit | Mar 10, 2018 | Jun 2, 2017 |
| Ubuntu | — | Upgrade imagemagickUpgrade libmagickcore-6.q16-2Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-3Upgrade libmagickcore5Upgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-7Upgrade libmagick++5 | Jul 24, 2017 | Jun 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub