PT-2016-7551

CVE-2016-8677

·

Published

2016-10-12

·

Updated

2021-04-20

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.3-1
Description The issue is related to the AcquireQuantumPixels function in MagickCore/quantum.c, which can be exploited by remote attackers using a crafted image file. This exploitation can trigger a memory allocation failure, potentially leading to unspecified impact.
Recommendations For versions prior to 7.0.3-1, update to version 7.0.3-1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the AcquireQuantumPixels function until a patch is available.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2016-2089
DLA-756-1
DSA-3726-1
MGASA-2018-0229
SUSE-SU-2016:2667-1
USN-3142-1
USN-3142-2
Found an issue in the description? Have something to add? Feel free to write us 👾