PT-2017-10206 · Imagemagick+2 · Imagemagick+2

Asarubbo

·

Published

2016-11-26

·

Updated

2021-04-28

·

CVE-2016-9559

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.3.7
Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and crash, via a crafted image. This is due to a problem in the coders/tiff.c file.
Recommendations For versions prior to 7.0.3.7, update to version 7.0.3.7 or later to resolve the issue. As a temporary workaround, consider restricting the processing of crafted images to minimize the risk of exploitation.

Fix

DoS

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2017-2096
CVE-2016-9559
DLA-756-1
DSA-3726-1
MGASA-2018-0229
OPENSUSE-SU-2017_0023-1
SUSE-SU-2016:3256-1
SUSE-SU-2016:3258-1
SUSE-SU-2017:0305-1

Affected Products

Alt Linux
Imagemagick
Suse