Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2016/12/01/4 | Mailing List Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2016/12/02/11 | Mailing List Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2016/12/02/12 | Mailing List Third Party Advisory |
| https://blogs.gentoo.org/ago/2016/12/01/imagemagick-heap-based-buffer-overflow-in-ispixelgray-pixel-accessor-h-incomplete-fix-for-cve-2016-9556/ | Patch Third Party Advisory VDB Entry |
| http://www.openwall.com/lists/oss-security/2016/12/01/4 | Mailing List Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2016/12/02/11 | Mailing List Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2016/12/02/12 | Mailing List Third Party Advisory |
| https://blogs.gentoo.org/ago/2016/12/01/imagemagick-heap-based-buffer-overflow-in-ispixelgray-pixel-accessor-h-incomplete-fix-for-cve-2016-9556/ | Patch Third Party Advisory VDB Entry |
Configurations
History
21 Nov 2024, 03:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.openwall.com/lists/oss-security/2016/12/01/4 - Mailing List, Third Party Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2016/12/02/11 - Mailing List, Third Party Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2016/12/02/12 - Mailing List, Third Party Advisory | |
| References | () https://blogs.gentoo.org/ago/2016/12/01/imagemagick-heap-based-buffer-overflow-in-ispixelgray-pixel-accessor-h-incomplete-fix-for-cve-2016-9556/ - Patch, Third Party Advisory, VDB Entry |
07 Nov 2023, 02:37
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556. |
Information
Published : 2017-02-17 02:59
Updated : 2024-11-21 03:01
NVD link : CVE-2016-9773
Mitre link : CVE-2016-9773
CVE.ORG link : CVE-2016-9773
JSON object : View
Products Affected
imagemagick
- imagemagick