The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read) in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability than CVE-2019-11472.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Aug 18, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-docUpgrade ImageMagick | Oct 28, 2020 | Aug 18, 2019 |
| Amazon_linux | — | Upgrade php55-pecl-imagickUpgrade php54-pecl-imagickUpgrade php56-pecl-imagickUpgrade php-pecl-imagickUpgrade php72-pecl-imagickUpgrade php70-pecl-imagickUpgrade ImageMagickUpgrade php71-pecl-imagick | Jul 18, 2020 | Aug 18, 2019 |
| Centos_linux | — | Upgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade autotrace-develUpgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade inkscape-viewUpgrade ImageMagickUpgrade inkscape-debuginfoUpgrade autotrace-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade inkscape-docsUpgrade inkscapeUpgrade autotrace | Apr 1, 2020 | Aug 18, 2019 |
| Debian | — | Upgrade imagemagick | Oct 22, 2019 | Aug 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Sep 16, 2021 | Aug 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Aug 18, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Aug 18, 2019 |
| Oracle_linux | — | Upgrade emacs-elUpgrade emacs-filesystemUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade autotrace-develUpgrade ImageMagickUpgrade emacs-terminalUpgrade ImageMagick-docUpgrade emacs-noxUpgrade ImageMagick-develUpgrade inkscape-viewUpgrade inkscape-docsUpgrade autotraceUpgrade inkscapeUpgrade ImageMagick-c++-develUpgrade emacsUpgrade emacs-common | Oct 5, 2022 | Apr 20, 2019 |
| Redhat_linux | — | Upgrade inkscape-viewNo solution existsUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade inkscape-debuginfoUpgrade autotrace-develUpgrade autotrace-debuginfoUpgrade autotraceUpgrade ImageMagick-docUpgrade ImageMagick-c++-develUpgrade ImageMagick-perlUpgrade inkscape-docsUpgrade ImageMagickUpgrade inkscapeUpgrade ImageMagick-debuginfo | Apr 1, 2020 | Aug 18, 2019 |
| Suse | — | Upgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade libmagick-7_q16hdri4-32bitUpgrade libmagick-devel-32bitUpgrade libMagick++-develUpgrade libMagick++-7_Q16HDRI4Upgrade libMagickCore-6_Q16-1Upgrade libmagickcore-7_q16hdri6-32bitUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-extraUpgrade ImageMagickUpgrade ImageMagick-docUpgrade ImageMagick-develUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-6-SUSEUpgrade libMagickCore-7_Q16HDRI6Upgrade libMagickWand-6_Q16-1Upgrade perl-PerlMagickUpgrade imagemagick-config-7-upstreamUpgrade imagemagick-devel-32bit | Oct 26, 2019 | Aug 18, 2019 |
| Ubuntu | — | Upgrade imagemagickUpgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-2Upgrade imagemagick (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-6Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extra | Nov 15, 2019 | Aug 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub