Description
Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF file, which triggers a buffer overflow. NOTE: some of these details are obtained from third party information.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | graphicsmagick | 1.3.5-5.1 | — |
| Debian 14 | imagemagick | 7:6.5.1.0-1.1 | — |
| Debian 13 | graphicsmagick | 1.3.5-5.1 | — |
| Debian 13 | imagemagick | 7:6.5.1.0-1.1 | — |
| Debian 12 | graphicsmagick | 1.3.5-5.1 | — |
| Debian 12 | imagemagick | 7:6.5.1.0-1.1 | — |
| Debian 5.0 | graphicsmagick | 1.1.11-3.2+lenny1 | DSA-1903-1 |
| Debian 5.0 | imagemagick | 7:6.3.7.9.dfsg2-1~lenny3 | DSA-1858-1 |
| Debian 4.0 | graphicsmagick | 1.1.7-13+etch1 | DSA-1903-1 |
| Debian 4.0 | imagemagick | 7:6.2.4.5.dfsg1-0.15+etch1 | DSA-1858-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | ImageMagick +4 | 6.2.8.0-4.el5_5.2 | RHSA-2010:0652 |
| RHEL 4 | ImageMagick +4 | 6.0.7.1-20.el4_8.1 | RHSA-2010:0653 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | GraphicsMagick | 1.3.25-1.1 | openSUSE-SU-2024:10505-1 |
Advisories 5
- RHSA-2010:0652 Red Hat Security Advisory: ImageMagick security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2010:0653 Red Hat Security Advisory: ImageMagick security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1903-1 graphicsmagick - several Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1858-1 imagemagick - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10505-1 GraphicsMagick-1.3.25-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 54729 vdb-entry
- http://wiki.rpath.com/Advisories:rPSA-2010-0074
- GLSA-201311-10 vendor-advisory
- 37959 third-party-advisory
- [oss-security] 20090608 Re: CVE Request -- ImageMagick -- Integer overflow in XMakeImage() mailing-list
- USN-784-1 vendor-advisory
- 20101027 rPSA-2010-0074-1 ImageMagick mailing-list
- 35382 third-party-advisory
- FEDORA-2010-0001 vendor-advisory
- 55721 third-party-advisory
- http://mirror1.smudge-it.co.uk/imagemagick/www/changelog.html
- 35111 vdb-entry
- http://imagemagick.org/script/changelog.php
- 35685 third-party-advisory
- 35216 third-party-advisory
- DSA-1858 vendor-advisory
- SUSE-SR:2009:012 vendor-advisory
- ADV-2009-1449 vdb-entry
- FEDORA-2010-0036 vendor-advisory
- 36260 third-party-advisory