CVE-2016-8678

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.3.0

Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and crash, via a crafted file. This is related to the IsPixelMonochrome function in MagickCore/pixel-accessor.h. The vendor has stated that this issue is specific to Q64, which they do not support.

Recommendations For ImageMagick version 7.0.3.0, consider avoiding the use of the IsPixelMonochrome function until a fix is available. As a temporary workaround, restrict the processing of crafted files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.