PT-2016-7551

CVE-2016-8677

·

تاريخ النشر

2016-10-12

·

تاريخ التحديث

2021-04-20

الوصف من

CVSS 3.1
8.8
عالية
المقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.3-1
Description The issue is related to the AcquireQuantumPixels function in MagickCore/quantum.c, which can be exploited by remote attackers using a crafted image file. This exploitation can trigger a memory allocation failure, potentially leading to unspecified impact.
Recommendations For versions prior to 7.0.3-1, update to version 7.0.3-1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the AcquireQuantumPixels function until a patch is available.
قابلية الاستغلال
إصلاح
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALT-PU-2016-2089
DLA-756-1
DSA-3726-1
MGASA-2018-0229
SUSE-SU-2016:2667-1
USN-3142-1
USN-3142-2
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾