CVE-2016-7101: Medium severity ImageMagick vulnerability
Published Sep 5, 2016
·Updated
The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large row value in an sgi file.
Affected Software
2 affected components
ImageMagick<6.9.5-8
ImageMagick>=7.0.0-0<7.0.2-10
Remediation
Patch Available
Event History
Sep 5, 2016
Data Sourced
via Debian·03:45 PM
SeverityAffected Software
Jan 18, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
via NVD·05:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-7101?
CVE-2016-7101 is classified as a denial of service vulnerability due to an out-of-bounds read.
2
How do I fix CVE-2016-7101?
To fix CVE-2016-7101, upgrade ImageMagick to version 7.0.2-10 or later.
3
Which versions of ImageMagick are affected by CVE-2016-7101?
CVE-2016-7101 affects ImageMagick versions prior to 7.0.2-10 and versions up to 6.9.5-8.
4
What type of attack does CVE-2016-7101 involve?
CVE-2016-7101 involves remote attackers exploiting a large row value in an sgi file to cause a denial of service.
5
Can CVE-2016-7101 be exploited without authentication?
Yes, CVE-2016-7101 can be exploited by remote attackers without requiring authentication.