CVE-2016-4564

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.4-0 ImageMagick versions 7.x prior to 7.0.1-2

Description The issue is related to the DrawImage function in MagickCore/draw.c, which makes an incorrect function call when attempting to locate the next token. This can be exploited by remote attackers using a crafted file, potentially causing a denial of service due to a buffer overflow and application crash, or possibly having other unspecified impacts.

Recommendations For ImageMagick versions prior to 6.9.4-0, update to version 6.9.4-0 or later. For ImageMagick versions 7.x prior to 7.0.1-2, update to version 7.0.1-2 or later.