The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read) in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability than CVE-2019-11472.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Aug 18, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick | Oct 28, 2020 | Aug 18, 2019 |
| Amazon_linux | — | Upgrade php55-pecl-imagickUpgrade php72-pecl-imagickUpgrade php-pecl-imagickUpgrade php56-pecl-imagickUpgrade php54-pecl-imagickUpgrade php70-pecl-imagickUpgrade ImageMagickUpgrade php71-pecl-imagick | Jul 18, 2020 | Aug 18, 2019 |
| Centos_linux | — | Upgrade inkscapeUpgrade inkscape-viewUpgrade autotrace-debuginfoUpgrade ImageMagickUpgrade inkscape-docsUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade autotraceUpgrade inkscape-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade autotrace-devel | Apr 1, 2020 | Aug 18, 2019 |
| Debian | — | Upgrade imagemagick | Oct 22, 2019 | Aug 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Sep 16, 2021 | Aug 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Aug 18, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Aug 18, 2019 |
| Oracle_linux | — | Upgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade emacsUpgrade emacs-commonUpgrade ImageMagick-docUpgrade inkscape-docsUpgrade inkscapeUpgrade emacs-noxUpgrade inkscape-viewUpgrade autotraceUpgrade ImageMagick-perlUpgrade emacs-elUpgrade emacs-terminalUpgrade ImageMagick-c++Upgrade ImageMagickUpgrade autotrace-develUpgrade emacs-filesystem | Oct 5, 2022 | Apr 20, 2019 |
| Redhat_linux | — | Upgrade ImageMagick-c++-develUpgrade ImageMagick-develNo solution existsUpgrade autotrace-debuginfoUpgrade autotraceUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade autotrace-develUpgrade ImageMagickUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade ImageMagick-perl | Apr 1, 2020 | Aug 18, 2019 |
| Suse | — | Upgrade ImageMagick-extraUpgrade libMagick++-7_Q16HDRI4Upgrade libmagickcore-7_q16hdri6-32bitUpgrade libmagick-devel-32bitUpgrade libMagickCore-6_Q16-1Upgrade ImageMagick-config-7-SUSEUpgrade libmagick-7_q16hdri4-32bitUpgrade libMagick++-develUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-config-6-upstreamUpgrade libMagick++-6_Q16-3Upgrade ImageMagickUpgrade ImageMagick-develUpgrade libMagickWand-6_Q16-1Upgrade ImageMagick-config-6-SUSEUpgrade imagemagick-config-7-upstreamUpgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-docUpgrade imagemagick-devel-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagickCore-6_Q16-1-32bitUpgrade perl-PerlMagick | Oct 26, 2019 | Aug 18, 2019 |
| Ubuntu | — | Upgrade libmagickwand5 (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade libmagick++-6.q16-7Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade imagemagickUpgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-6Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5-extra (Ubuntu Pro) | Nov 15, 2019 | Aug 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub