Published: 23/03/2017 Updated: 24/03/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote malicious users to cause a denial of service (out-of-bounds heap read) via a crafted image file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
imagemagick imagemagick 7.0.3-8
opensuse project leap 42.1
debian debian linux 8.0

Debian Bug report logs - #845242 imagemagick: CVE-2016-9556: Heap buffer overflow in heap-buffer-overflow in IsPixelGray Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Dat ...

Several security issues were fixed in ImageMagick ...

Several issues have been discovered in ImageMagick, a popular set of programs and libraries for image manipulation These issues include several problems in memory handling that can result in a denial of service attack or in execution of arbitrary code by an attacker with control on the image input For the stable distribution (jessie), these probl ...

The IsPixelGray function in MagickCore/pixel-accessorh in ImageMagick 703-8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file ...

CWE-119 https://github.com/ImageMagick/ImageMagick/commit/ce98a7acbcfca7f0a178f4b1e7b957e419e0cc99 https://bugzilla.redhat.com/show_bug.cgi?id=1398198 https://blogs.gentoo.org/ago/2016/11/19/imagemagick-heap-based-buffer-overflow-in-ispixelgray-pixel-accessor-h http://www.securityfocus.com/bid/94492 http://www.openwall.com/lists/oss-security/2016/12/02/12 http://www.openwall.com/lists/oss-security/2016/12/01/4 http://www.openwall.com/lists/oss-security/2016/11/23/1 http://www.debian.org/security/2016/dsa-3726 http://lists.opensuse.org/opensuse-updates/2016-12/msg00040.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845242 https://usn.ubuntu.com/3142-1/https://nvd.nist.gov

CVE-2016-9556

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect