First published: Thu Jan 05 2017(Updated: )
An out-of-bounds write vulnerability was found in ImageMagick. A maliciously crafted file could cause the application to crash or possibly have other impact. References: <a href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=834501">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=834501</a> <a href="http://seclists.org/oss-sec/2016/q4/758">http://seclists.org/oss-sec/2016/q4/758</a> Upstream patch: <a href="https://github.com/ImageMagick/ImageMagick/commit/9e187b73a8a1290bb0e1a1c878f8be1917aa8742">https://github.com/ImageMagick/ImageMagick/commit/9e187b73a8a1290bb0e1a1c878f8be1917aa8742</a>
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/ImageMagick | <6.9.5 | 6.9.5 |
ImageMagick | <=6.9.5-5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-10052 is classified as a high severity vulnerability due to its potential to cause crashes and undefined behavior.
To remediate CVE-2016-10052, upgrade ImageMagick to version 6.9.5 or later.
CVE-2016-10052 is an out-of-bounds write vulnerability.
CVE-2016-10052 affects any system running versions of ImageMagick up to 6.9.5-5.
Exploitation of CVE-2016-10052 could lead to application crashes or potentially allow attackers to execute arbitrary code.