Heap-based buffer overflow in coders/hdr.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted HDR file.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2016/09/22/2 | Mailing List Patch Third Party Advisory |
http://www.securityfocus.com/bid/93131 | Third Party Advisory VDB Entry |
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1537213 | Issue Tracking Third Party Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=1378747 | Issue Tracking Patch Third Party Advisory |
https://github.com/ImageMagick/ImageMagick/commit/14e606db148d6ebcaae20f1e1d6d71903ca4a556 | Patch |
https://github.com/ImageMagick/ImageMagick/issues/90 | Issue Tracking Patch Vendor Advisory |
Configurations
History
No history.
Information
Published : 2017-04-20 18:59
Updated : 2023-12-10 12:01
NVD link : CVE-2016-7520
Mitre link : CVE-2016-7520
CVE.ORG link : CVE-2016-7520
JSON object : View
Products Affected
imagemagick
- imagemagick
CWE
CWE-125
Out-of-bounds Read