Heap overflow in the WaveletDenoiseImage function in MagickCore/fx.c in ImageMagick before 6.9.6-4 and 7.x before 7.0.3-6 allows remote attackers to cause a denial of service (crash) via a crafted image.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2016/11/13/1 | Mailing List Patch Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2016/11/14/10 | Mailing List Patch Third Party Advisory |
| http://www.securityfocus.com/bid/94310 | Third Party Advisory VDB Entry |
| https://github.com/ImageMagick/ImageMagick/commit/3cbfb163cff9e5b8cdeace8312e9bfee810ed02b | Issue Tracking Patch Third Party Advisory |
| https://github.com/ImageMagick/ImageMagick/issues/296 | Issue Tracking Patch Third Party Advisory |
| https://security.gentoo.org/glsa/201702-09 |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2017-01-27 22:59
Updated : 2023-12-10 12:01
NVD link : CVE-2016-9298
Mitre link : CVE-2016-9298
CVE.ORG link : CVE-2016-9298
JSON object : View
Products Affected
imagemagick
- imagemagick
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer