PT-2017-1736 · Imagemagick+2 · Imagemagick+2
Andrej Nemec
·
Publicado
2016-10-12
·
Atualizado
2020-11-16
·
CVE-2016-10063
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
ImageMagick versions prior to 6.9.5-1
Description
The issue is caused by a buffer overflow in the coders/tiff.c file of the ImageMagick console graphic editor. This can be exploited by a remote attacker using a specially crafted file, potentially leading to a denial of service (application crash) or other unspecified impacts.
Recommendations
For versions prior to 6.9.5-1, update to version 6.9.5-1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the coders/tiff.c module to minimize the risk of exploitation. Avoid using specially crafted files that could trigger the buffer overflow in the affected module until the issue is resolved.
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Imagemagick
Suse