Vulnerability Description
Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause a denial of service (out-of-bounds read, memory leak, and crash) via a crafted image.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Imagemagick | Imagemagick | <= 6.9.5-3 |
| Oracle | Solaris | 10.0 |
Related Weaknesses (CWE)
References
- http://www.openwall.com/lists/oss-security/2016/07/28/13ExploitPatchThird Party Advisory
- http://www.openwall.com/lists/oss-security/2016/07/28/15ExploitThird Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlThird Party Advisory
- http://www.securityfocus.com/bid/92186Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1036501Third Party AdvisoryVDB Entry
- https://github.com/ImageMagick/ImageMagick/blob/6.9.5-4/ChangeLogRelease NotesVendor Advisory
- https://github.com/ImageMagick/ImageMagick/commit/dd84447b63a71fa8c3f47071b09454PatchVendor Advisory
- https://security.gentoo.org/glsa/201611-21
- http://www.openwall.com/lists/oss-security/2016/07/28/13ExploitPatchThird Party Advisory
- http://www.openwall.com/lists/oss-security/2016/07/28/15ExploitThird Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlThird Party Advisory
- http://www.securityfocus.com/bid/92186Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1036501Third Party AdvisoryVDB Entry
- https://github.com/ImageMagick/ImageMagick/blob/6.9.5-4/ChangeLogRelease NotesVendor Advisory
- https://github.com/ImageMagick/ImageMagick/commit/dd84447b63a71fa8c3f47071b09454PatchVendor Advisory
FAQ
What is CVE-2016-6491?
CVE-2016-6491 is a vulnerability with a CVSS score of 8.8 (HIGH). Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause a denial of service (out-of-bounds read, ...
How severe is CVE-2016-6491?
CVE-2016-6491 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-6491?
Check the references section above for vendor advisories and patch information. Affected products include: Imagemagick Imagemagick, Oracle Solaris.