CVE-2016-5687: Critical severity imagemagick vulnerability
Published Dec 13, 2016
·Updated
The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which triggers an out-of-bounds read.
Affected Software
7 affected componentsFixes available
ImageMagick<=6.9.4-2
ImageMagick=7.0.1-0
ImageMagick=7.0.1-1
ImageMagick=7.0.1-2
ImageMagick=7.0.1-3
Oracle Solaris=11.3
debian/imagemagick
8:6.9.11.60+dfsg-1.3+deb11u48:6.9.11.60+dfsg-1.3+deb11u58:6.9.11.60+dfsg-1.6+deb12u28:6.9.11.60+dfsg-1.6+deb12u18:7.1.1.43+dfsg1-18:7.1.1.47+dfsg1-1
Event History
Dec 13, 2016
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Apr 28, 2025
Data Sourced
via Debian·02:16 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-5687?
CVE-2016-5687 is categorized as a medium severity vulnerability due to its potential for causing out-of-bounds reads.
2
What impact does CVE-2016-5687 have?
CVE-2016-5687 may allow remote attackers to execute code or crash the application through a crafted DDS file.
3
How do I fix CVE-2016-5687?
To fix CVE-2016-5687, upgrade to ImageMagick versions 6.9.4-3 or 7.0.1-4 or later.
4
Which versions of ImageMagick are affected by CVE-2016-5687?
CVE-2016-5687 affects ImageMagick versions prior to 6.9.4-3 and 7.x before 7.0.1-4.
5
What types of files trigger the vulnerability CVE-2016-5687?
CVE-2016-5687 is triggered by malformed DDS files.