PT-2017-10206 · Imagemagick+2 · Imagemagick+2

Asarubbo

·

Publicado

2016-11-26

·

Atualizado

2021-04-28

·

CVE-2016-9559

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.3.7
Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and crash, via a crafted image. This is due to a problem in the coders/tiff.c file.
Recommendations For versions prior to 7.0.3.7, update to version 7.0.3.7 or later to resolve the issue. As a temporary workaround, consider restricting the processing of crafted images to minimize the risk of exploitation.

Correção

DoS

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2017-2096
CVE-2016-9559
DLA-756-1
DSA-3726-1
MGASA-2018-0229
OPENSUSE-SU-2017_0023-1
SUSE-SU-2016:3256-1
SUSE-SU-2016:3258-1
SUSE-SU-2017:0305-1

Produtos afetados

Alt Linux
Imagemagick
Suse