CVE-2016-4562: Buffer Overflow
The DrawDashPolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles calculations of certain vertices integer data, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4562?
CVE-2016-4562 is considered a moderate severity vulnerability due to its potential to cause denial of service through buffer overflow.
How do I fix CVE-2016-4562?
To fix CVE-2016-4562, upgrade ImageMagick to version 6.9.4-0 or later in the 6.x series or 7.0.1-2 or later in the 7.x series.
What impact can CVE-2016-4562 have on my system?
CVE-2016-4562 can lead to application crashes and may also expose the system to potential malicious exploitation.
Which versions of ImageMagick are affected by CVE-2016-4562?
CVE-2016-4562 affects ImageMagick versions prior to 6.9.4-0 and 7.x versions prior to 7.0.1-2.
Is there any workaround for CVE-2016-4562?
A workaround for CVE-2016-4562 is not recommended; the best solution is to update to a patched version of ImageMagick.