CVE-2016-7514

Опубликовано: 20 апр. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

The ReadPSDChannelPixels function in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.

Ссылки

http://www.openwall.com/lists/oss-security/2016/09/22/2
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/93122
Third Party Advisory
VDB Entry
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1533442
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1378739
Issue Tracking
Patch
https://github.com/ImageMagick/ImageMagick/commit/198fffab4daf8aea88badd9c629350e5b26ec32f
Patch
https://github.com/ImageMagick/ImageMagick/commit/280215b9936d145dd5ee91403738ccce1333cab1
Patch
https://github.com/ImageMagick/ImageMagick/commit/6f1879d498bcc5cce12fe0c5decb8dbc0f608e5d
Patch
https://github.com/ImageMagick/ImageMagick/commit/e14fd0a2801f73bdc123baf4fbab97dec55919eb
Patch
https://github.com/ImageMagick/ImageMagick/issues/83
Issue Tracking
Patch
http://www.openwall.com/lists/oss-security/2016/09/22/2
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/93122
Third Party Advisory
VDB Entry
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1533442
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1378739
Issue Tracking
Patch
https://github.com/ImageMagick/ImageMagick/commit/198fffab4daf8aea88badd9c629350e5b26ec32f
Patch
https://github.com/ImageMagick/ImageMagick/commit/280215b9936d145dd5ee91403738ccce1333cab1
Patch
https://github.com/ImageMagick/ImageMagick/commit/6f1879d498bcc5cce12fe0c5decb8dbc0f608e5d
Patch
https://github.com/ImageMagick/ImageMagick/commit/e14fd0a2801f73bdc123baf4fbab97dec55919eb
Patch
https://github.com/ImageMagick/ImageMagick/issues/83
Issue Tracking
Patch

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

Версия до 7.0.1-0 (исключая)

EPSS

Процентиль: 78%

0.01103

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2016-7514

CVSS3: 6.5

ubuntu

почти 9 лет назад

The ReadPSDChannelPixels function in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.

CVE-2016-7514

CVSS3: 5.3

redhat

около 10 лет назад

The ReadPSDChannelPixels function in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.

CVE-2016-7514

CVSS3: 6.5

debian

почти 9 лет назад

The ReadPSDChannelPixels function in coders/psd.c in ImageMagick allow ...

GHSA-v4hq-7qcv-586x

CVSS3: 6.5

github

больше 3 лет назад

The ReadPSDChannelPixels function in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.

SUSE-SU-2016:2964-1

suse-cvrf

около 9 лет назад

Security update for ImageMagick

EPSS

Процентиль: 78%

0.01103

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125