CVE-2016-7800: Buffer Overflow
An unsigned overflow leading to heap buffer overflow vulnerability was found in GraphicsMagick 8BIM reader. A maliciously crafted file could cause the application to crash.
References:
http://seclists.org/oss-sec/2016/q4/0
Upstream patch:
https://sourceforge.net/p/graphicsmagick/code/ci/5c7b6d6094a25e99c57f8b18343914ebfd8213ef/
Other sources
Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM chunk, which triggers a heap-based buffer overflow.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7800?
CVE-2016-7800 is classified as a critical vulnerability due to its potential to cause application crashes.
How do I fix CVE-2016-7800?
To fix CVE-2016-7800, update GraphicsMagick to version 1.3.26 or later.
Which versions of GraphicsMagick are affected by CVE-2016-7800?
CVE-2016-7800 affects GraphicsMagick versions up to and including 1.3.25.
What types of systems are impacted by CVE-2016-7800?
CVE-2016-7800 impacts systems running vulnerable versions of GraphicsMagick on various Linux distributions.
Can CVE-2016-7800 lead to remote code execution?
CVE-2016-7800 does not directly lead to remote code execution but can cause denial of service by crashing the application.