| Package | Affected versions | Patched versions |
|---|---|---|
| imagemagick | = 7.0.6-0 |
In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue function in coders/svg.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free