Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-9773

Опубликовано: 17 фев. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3
CVSS3: 5.5

Описание

Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556.

РелизСтатусПримечание
devel

not-affected

code not present
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/xenial

not-affected

code not present
precise

not-affected

code not present
trusty

not-affected

code not present
trusty/esm

not-affected

code not present
upstream

needed

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

not-affected

code not present

Показывать по

EPSS

Процентиль: 64%
0.00472
Низкий

4.3 Medium

CVSS2

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 3.3
redhat
около 9 лет назад

Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556.

CVSS3: 5.5
nvd
почти 9 лет назад

Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556.

CVSS3: 5.5
debian
почти 9 лет назад

Heap-based buffer overflow in the IsPixelGray function in MagickCore/p ...

CVSS3: 5.5
github
больше 3 лет назад

Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556.

suse-cvrf
около 9 лет назад

Security update for ImageMagick

EPSS

Процентиль: 64%
0.00472
Низкий

4.3 Medium

CVSS2

5.5 Medium

CVSS3