The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read) in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability than CVE-2019-11472.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Aug 18, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick | Oct 28, 2020 | Aug 18, 2019 |
| Amazon_linux | — | Upgrade php55-pecl-imagickUpgrade php72-pecl-imagickUpgrade ImageMagickUpgrade php56-pecl-imagickUpgrade php54-pecl-imagickUpgrade php-pecl-imagick | Jul 18, 2020 | Aug 18, 2019 |
| Centos_linux | — | Upgrade autotrace-develUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++Upgrade inkscape-debuginfoUpgrade inkscape-viewUpgrade inkscapeUpgrade autotrace-debuginfoUpgrade ImageMagick-docUpgrade inkscape-docsUpgrade ImageMagickUpgrade ImageMagick-c++-develUpgrade autotrace | Apr 1, 2020 | Aug 18, 2019 |
| Debian | — | Upgrade imagemagick | Oct 22, 2019 | Aug 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Sep 16, 2021 | Aug 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Aug 18, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Aug 18, 2019 |
| Oracle_linux | — | Upgrade inkscape-docsUpgrade inkscapeUpgrade emacsUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade emacs-commonUpgrade emacs-noxUpgrade inkscape-viewUpgrade ImageMagick-docUpgrade autotraceUpgrade autotrace-develUpgrade emacs-terminalUpgrade emacs-elUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade emacs-filesystemUpgrade ImageMagick | Oct 5, 2022 | Apr 20, 2019 |
| Redhat_linux | — | Upgrade autotraceUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade inkscape-debuginfoUpgrade ImageMagick-c++-develUpgrade autotrace-debuginfoUpgrade autotrace-develNo solution existsUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade inkscapeUpgrade ImageMagick-debuginfoUpgrade inkscape-docsUpgrade ImageMagick-perlUpgrade ImageMagick | Apr 1, 2020 | Aug 18, 2019 |
| Suse | — | Upgrade ImageMagick-develUpgrade imagemagick-config-7-upstreamUpgrade ImageMagickUpgrade libMagickWand-6_Q16-1Upgrade ImageMagick-docUpgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-config-6-SUSEUpgrade perl-PerlMagickUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagick++-6_Q16-3Upgrade imagemagick-devel-32bitUpgrade libMagick++-develUpgrade libmagick-devel-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-extraUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-6_Q16-1Upgrade libMagick++-7_Q16HDRI4Upgrade ImageMagick-config-7-SUSE | Oct 26, 2019 | Aug 18, 2019 |
| Ubuntu | — | Upgrade imagemagick-6.q16Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade imagemagickUpgrade imagemagick (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-6Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade perlmagick (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro) | Nov 15, 2019 | Aug 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub