First published: Thu Jan 05 2017(Updated: )
A buffer overflow vulnerability was found in ImageMagick in the coders/sixel.c file. A maliciously crafted file could cause the application to crash or possibly have other impact. References: <a href="http://seclists.org/oss-sec/2016/q4/758">http://seclists.org/oss-sec/2016/q4/758</a> <a href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=836172">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=836172</a> Upstream patch: <a href="https://github.com/ImageMagick/ImageMagick/commit/10b3823a7619ed22d42764733eb052c4159bc8c1">https://github.com/ImageMagick/ImageMagick/commit/10b3823a7619ed22d42764733eb052c4159bc8c1</a>
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/ImageMagick | <6.9.5 | 6.9.5 |
ImageMagick | <=6.9.5-7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-10056 is categorized as a high-severity vulnerability due to its potential to cause crashes and other impacts when exploited.
To fix CVE-2016-10056, update to ImageMagick version 6.9.5 or later.
CVE-2016-10056 affects ImageMagick versions prior to 6.9.5 and specifically versions up to 6.9.5-7.
CVE-2016-10056 is a buffer overflow vulnerability located in the coders/sixel.c file of ImageMagick.
While the primary impact of CVE-2016-10056 is application crashes, it may also allow for further vulnerabilities to be exploited, potentially leading to remote code execution.