CVE-2016-7906

Опубликовано: 18 янв. 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

magick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to cause a denial of service (use-after-free) via a crafted file.

Ссылки

http://www.debian.org/security/2016/dsa-3726
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/02/1
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/02/3
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/93271
Third Party Advisory
VDB Entry
https://github.com/ImageMagick/ImageMagick/commit/90406972f108c4da71f998601b06abdc2ac6f06e
Patch
Vendor Advisory
https://github.com/ImageMagick/ImageMagick/issues/281
Issue Tracking
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201611-21
Third Party Advisory
http://www.debian.org/security/2016/dsa-3726
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/02/1
Mailing List
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/02/3
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/93271
Third Party Advisory
VDB Entry
https://github.com/ImageMagick/ImageMagick/commit/90406972f108c4da71f998601b06abdc2ac6f06e
Patch
Vendor Advisory
https://github.com/ImageMagick/ImageMagick/issues/281
Issue Tracking
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201611-21
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00468

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2016-7906

CVSS3: 5.5

ubuntu

около 9 лет назад

magick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to cause a denial of service (use-after-free) via a crafted file.

CVE-2016-7906

CVSS3: 5.1

redhat

больше 9 лет назад

magick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to cause a denial of service (use-after-free) via a crafted file.

CVE-2016-7906

CVSS3: 5.5

debian

около 9 лет назад

magick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to c ...

GHSA-5r8w-6xfr-q973

CVSS3: 5.5

github

больше 3 лет назад

magick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to cause a denial of service (use-after-free) via a crafted file.

BDU:2017-00320

fstec

около 9 лет назад

Уязвимость консольного графического редактора ImageMagick, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 64%

0.00468

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-416