First published: Thu Jan 05 2017(Updated: )
A buffer overflow vulnerability was found in ImageMagick in the coders/pdb.c file. A maliciously crafted file could cause the application to crash or possibly have other impact. References: <a href="http://seclists.org/oss-sec/2016/q4/758">http://seclists.org/oss-sec/2016/q4/758</a> <a href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=836172">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=836172</a> Upstream patch: <a href="https://github.com/ImageMagick/ImageMagick/commit/10b3823a7619ed22d42764733eb052c4159bc8c1">https://github.com/ImageMagick/ImageMagick/commit/10b3823a7619ed22d42764733eb052c4159bc8c1</a>
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/ImageMagick | <6.9.5 | 6.9.5 |
ImageMagick | <=6.9.5-7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-10055 has been classified as a moderate severity vulnerability due to the potential for application crashes.
To fix CVE-2016-10055, update ImageMagick to version 6.9.5 or later.
CVE-2016-10055 is a buffer overflow vulnerability affecting ImageMagick.
Exploitation of CVE-2016-10055 could lead to the application crashing or unforeseen impacts on system stability.
CVE-2016-10055 affects ImageMagick versions prior to 6.9.5.