PT-2016-6641 · Imagemagick+3 · Imagemagick+3

Hanno Böck

·

Publicado

2016-06-05

·

Atualizado

2016-12-16

·

CVE-2016-5687

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.4-3 ImageMagick versions 7.x prior to 7.0.1-4
Description The issue is related to the VerticalFilter function in the DDS coder, which allows remote attackers to have an unspecified impact via a crafted DDS file. This triggers an out-of-bounds read.
Recommendations For versions prior to 6.9.4-3, update to version 6.9.4-3 or later. For versions 7.x prior to 7.0.1-4, update to version 7.0.1-4 or later.

Correção

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2016-1580
CVE-2016-5687
DLA-731-1
DSA-3652-1
OPENSUSE-SU-2016_1748-1
OPENSUSE-SU-2016_1833-1
SUSE-SU-2016:1782-1
SUSE-SU-2016:1784-1
SUSE-SU-2016:2964-1
USN-3131-1

Produtos afetados

Alt Linux
Imagemagick
Suse
Ubuntu