Vulnerability CVE-2016-6823
Published: 2017-01-18

Description:
Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (crash) via crafted height and width values, which triggers an out-of-bounds write.

See advisories in our WLB2 database:
Topic
Author
Date
High
ImageMagick BMP Coder Out-Of-Bounds Write Vulnerability
pwchen(陈佩文...
26.09.2016

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
Imagemagick -> Imagemagick 

 References:
http://www.openwall.com/lists/oss-security/2016/09/26/3
http://www.securityfocus.com/bid/93158
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=834504
https://github.com/ImageMagick/ImageMagick/commit/4cc6ec8a4197d4c008577127736bf7985d632323
Copyright 2024, cxsecurity.com

 

Back to Top