CVE-2016-4563: Buffer Overflow
The TraceStrokePolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles the relationship between the BezierQuantum value and certain strokes data, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4563?
CVE-2016-4563 has been rated with a severity level that potentially allows for denial of service attacks due to buffer overflow issues.
How do I fix CVE-2016-4563?
To fix CVE-2016-4563, update ImageMagick to version 6.9.4-0 or later, or to 7.0.1-2 or later.
Which versions of ImageMagick are affected by CVE-2016-4563?
CVE-2016-4563 affects ImageMagick versions prior to 6.9.4-0 and 7.x before 7.0.1-2.
What types of attacks can CVE-2016-4563 cause?
CVE-2016-4563 can lead to remote denial of service attacks through application crash and buffer overflow.
Is CVE-2016-4563 a critical vulnerability?
While CVE-2016-4563 is not classified as critical, it poses significant risk due to its potential for denial of service.