CVE-2016-4563

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.4-0 ImageMagick versions 7.x prior to 7.0.1-2

Description The issue is related to the handling of the relationship between the BezierQuantum value and certain strokes data in the TraceStrokePolygon function. This can be exploited by remote attackers using a crafted file, potentially leading to a denial of service, such as a buffer overflow and application crash, or possibly other unspecified impacts.

Recommendations For ImageMagick versions prior to 6.9.4-0, update to version 6.9.4-0 or later. For ImageMagick versions 7.x prior to 7.0.1-2, update to version 7.0.1-2 or later.