PT-2016-3279

CVE-2016-7996

·

Published

2016-10-07

·

Updated

2024-06-15

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions GraphicsMagick versions 1.3.25 and earlier
Description The issue is related to a heap-based buffer overflow in the WPG format reader, which can be exploited by remote attackers using a colormap with a large number of entries. This may allow an attacker to cause unspecified impact, potentially including denial of service or execution of arbitrary code.
Recommendations For GraphicsMagick versions 1.3.25 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2018-2652
DLA-683-1
DSA-3746-1
MGASA-2016-0337
MGASA-2017-0229
OPENSUSE-SU-2016_3060-1
OPENSUSE-SU-2024:10596-1
SUSE-SU-2016:2667-1
SUSE-SU-2016:2724-1
SUSE-SU-2016:2964-1
SUSE-SU-2017:3435-1
SUSE-SU-2017_3435-1
Found an issue in the description? Have something to add? Feel free to write us 👾