{"id":"USN-3363-2","aliases":[],"status":"published","title":"imagemagick regression","description":"USN-3363-1 fixed vulnerabilities in ImageMagick. The update caused a\nregression for certain users when processing images. The problematic\npatch has been reverted pending further investigation.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n It was discovered that ImageMagick incorrectly handled certain malformed\n image files. If a user or automated system using ImageMagick were tricked\n into opening a specially crafted image, an attacker could exploit this to\n cause a denial of service or possibly execute code with the privileges of\n the user invoking the program.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2017-07-31T16:54:12Z","modified":"2026-04-22T09:36:40Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","fixed_in":["8:6.7.7.10-6ubuntu3.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.9"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.9"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.9"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-3363-2","tags":["advisory"]},{"url":"https://launchpad.net/bugs/1707015","tags":["report"]}],"sources":{"osv":[{"id":"USN-3363-2","title":"imagemagick regression","description":"USN-3363-1 fixed vulnerabilities in ImageMagick. The update caused a\nregression for certain users when processing images. The problematic\npatch has been reverted pending further investigation.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n It was discovered that ImageMagick incorrectly handled certain malformed\n image files. If a user or automated system using ImageMagick were tricked\n into opening a specially crafted image, an attacker could exploit this to\n cause a denial of service or possibly execute code with the privileges of\n the user invoking the program.\n","status":"published","published":"2017-07-31T16:54:12Z","modified":"2026-04-22T09:36:40.327732Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}