First published: Thu Jan 05 2017(Updated: )
A buffer overflow vulnerability was found in ImageMagick in the coders/tiff.c file. A maliciously crafted file could cause the application to crash or possibly have other impact. References: <a href="http://seclists.org/oss-sec/2016/q4/758">http://seclists.org/oss-sec/2016/q4/758</a> <a href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=836172">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=836172</a> Upstream patch: <a href="https://github.com/ImageMagick/ImageMagick/commit/10b3823a7619ed22d42764733eb052c4159bc8c1">https://github.com/ImageMagick/ImageMagick/commit/10b3823a7619ed22d42764733eb052c4159bc8c1</a>
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/ImageMagick | <6.9.5 | 6.9.5 |
ImageMagick | <=6.9.5-7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2016-10057 is considered high due to its potential to cause application crashes and other impacts.
To fix CVE-2016-10057, update ImageMagick to version 6.9.5 or later.
CVE-2016-10057 affects ImageMagick versions prior to 6.9.5-7.
CVE-2016-10057 is a buffer overflow vulnerability found in the ImageMagick library.
CVE-2016-10057 can cause applications using ImageMagick to crash or potentially execute arbitrary code.