CVE-2016-7799

Опубликовано: 18 янв. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.

Ссылки

http://www.debian.org/security/2016/dsa-3726
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/01/4
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/01/6
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/93264
Third Party Advisory
VDB Entry
https://github.com/ImageMagick/ImageMagick/commit/a7bb158b7bedd1449a34432feb3a67c8f1873bfa
Issue Tracking
Patch
Third Party Advisory
https://github.com/ImageMagick/ImageMagick/issues/280
Issue Tracking
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201611-21
Third Party Advisory
http://www.debian.org/security/2016/dsa-3726
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/01/4
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/01/6
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/93264
Third Party Advisory
VDB Entry
https://github.com/ImageMagick/ImageMagick/commit/a7bb158b7bedd1449a34432feb3a67c8f1873bfa
Issue Tracking
Patch
Third Party Advisory
https://github.com/ImageMagick/ImageMagick/issues/280
Issue Tracking
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201611-21
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

Версия до 6.9.6-0 (исключая)

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

Версия от 7.0.0-0 (включая) до 7.0.3-2 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01299

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2016-7799

CVSS3: 6.5

ubuntu

около 9 лет назад

MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.

CVE-2016-7799

CVSS3: 5.1

redhat

больше 9 лет назад

MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.

CVE-2016-7799

CVSS3: 6.5

debian

около 9 лет назад

MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attac ...

GHSA-6j4v-x644-mv8v

CVSS3: 6.5

github

больше 3 лет назад

MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.

BDU:2017-00321

fstec

около 9 лет назад

Уязвимость консольного графического редактора ImageMagick, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 79%

0.01299

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125