PT-2016-6023 · Imagemagick+3 · Imagemagick+3

Publicado

2016-03-30

·

Atualizado

2016-11-21

·

CVE-2016-4563

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.4-0 ImageMagick versions 7.x prior to 7.0.1-2
Description The issue is related to the handling of the relationship between the BezierQuantum value and certain strokes data in the TraceStrokePolygon function. This can be exploited by remote attackers using a crafted file, potentially leading to a denial of service, such as a buffer overflow and application crash, or possibly other unspecified impacts.
Recommendations For ImageMagick versions prior to 6.9.4-0, update to version 6.9.4-0 or later. For ImageMagick versions 7.x prior to 7.0.1-2, update to version 7.0.1-2 or later.

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2016-1289
CVE-2016-4563
DLA-517-1
DSA-3652-1
OPENSUSE-SU-2016_1748-1
OPENSUSE-SU-2016_1833-1
SUSE-SU-2016:1782-1
SUSE-SU-2016:1784-1
USN-3131-1

Produtos afetados

Alt Linux
Imagemagick
Suse
Ubuntu