PT-2016-6642
CVE-2016-5688
·
تاريخ النشر
2016-06-05
·
تاريخ التحديث
2016-12-16
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ImageMagick versions prior to 6.9.4-4
ImageMagick versions 7.x prior to 7.0.1-5
Description
The issue concerns the WPG parser in ImageMagick. When a memory limit is set, it allows remote attackers to have an unspecified impact via certain vectors. These vectors are related to the SetImageExtent return-value check and can trigger a heap-based buffer overflow in the
SetPixelIndex function or an invalid write operation in the ScaleCharToQuantum or SetPixelIndex functions.Recommendations
For ImageMagick versions prior to 6.9.4-4, update to version 6.9.4-4 or later.
For ImageMagick versions 7.x prior to 7.0.1-5, update to version 7.0.1-5 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾