The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read) in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability than CVE-2019-11472.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Aug 18, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick | Oct 28, 2020 | Aug 18, 2019 |
| Amazon_linux | — | Upgrade php70-pecl-imagickUpgrade php71-pecl-imagickUpgrade ImageMagickUpgrade php-pecl-imagickUpgrade php72-pecl-imagickUpgrade php55-pecl-imagickUpgrade php54-pecl-imagickUpgrade php56-pecl-imagick | Jul 18, 2020 | Aug 18, 2019 |
| Centos_linux | — | Upgrade ImageMagick-perlUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade autotrace-develUpgrade inkscape-debuginfoUpgrade ImageMagick-c++-develUpgrade inkscape-docsUpgrade ImageMagickUpgrade inkscapeUpgrade autotrace-debuginfoUpgrade inkscape-viewUpgrade ImageMagick-docUpgrade autotrace | Apr 1, 2020 | Aug 18, 2019 |
| Debian | — | Upgrade imagemagick | Oct 22, 2019 | Aug 18, 2019 |
| Huawei Euleros 2_0_sp2 | — | — | Sep 16, 2021 | Aug 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Aug 18, 2019 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.10.68-11.4.16.0.1.1.0 on Solaris 11.4 | Dec 18, 2019 | Aug 18, 2019 |
| Oracle_linux | — | Upgrade ImageMagick-docUpgrade inkscapeUpgrade emacsUpgrade autotraceUpgrade ImageMagick-c++-develUpgrade inkscape-docsUpgrade emacs-noxUpgrade inkscape-viewUpgrade emacs-commonUpgrade ImageMagick-develUpgrade emacs-filesystemUpgrade ImageMagick-perlUpgrade ImageMagick-c++Upgrade emacs-terminalUpgrade ImageMagickUpgrade autotrace-develUpgrade emacs-el | Oct 5, 2022 | Apr 20, 2019 |
| Redhat_linux | — | Upgrade inkscape-docsUpgrade ImageMagick-debuginfoUpgrade inkscapeUpgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++-develNo solution existsUpgrade ImageMagick-develUpgrade autotrace-develUpgrade ImageMagick-c++Upgrade inkscape-viewUpgrade autotraceUpgrade inkscape-debuginfoUpgrade ImageMagick-docUpgrade autotrace-debuginfo | Apr 1, 2020 | Aug 18, 2019 |
| Suse | — | Upgrade imagemagick-docUpgrade libmagickcore-7_q16hdri6Upgrade libmagickwand-6_q16-1Upgrade imagemagick-extraUpgrade libmagickcore-7_q16hdri6-32bitUpgrade imagemagick-config-6-upstreamUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagick-develUpgrade libmagickwand-7_q16hdri6Upgrade libmagick-6_q16-3Upgrade libmagickcore-6_q16-1-32bitUpgrade imagemagick-config-7-suseUpgrade libmagick-devel-32bitUpgrade libmagick-7_q16hdri4-32bitUpgrade libmagickcore-6_q16-1Upgrade imagemagick-develUpgrade imagemagickUpgrade imagemagick-config-7-upstreamUpgrade imagemagick-config-6-suseUpgrade imagemagick-devel-32bitUpgrade perl-perlmagickUpgrade libmagick-7_q16hdri4 | Oct 26, 2019 | Aug 18, 2019 |
| Ubuntu | — | Upgrade libmagickcore-6.q16-2Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-7Upgrade imagemagickUpgrade imagemagick (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade imagemagick-6.q16Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5 | Nov 15, 2019 | Aug 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub