CVE-2016-6823

high
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (crash) via crafted height and width values, which triggers an out-of-bounds write.

References

https://github.com/ImageMagick/ImageMagick/commit/4cc6ec8a4197d4c008577127736bf7985d632323

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=834504

http://www.openwall.com/lists/oss-security/2016/09/26/3

http://www.securityfocus.com/bid/93158

Details

Source: MITRE

Published: 2017-01-18

Updated: 2021-04-28

Type: CWE-190

Risk Information

CVSS v2

Base Score: 5

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Impact Score: 2.9

Exploitability Score: 10

Severity: MEDIUM

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score: 3.6

Exploitability Score: 3.9

Severity: HIGH

Tenable Plugins

View all (14 total)

IDNameProductFamilySeverity
135519EulerOS 2.0 SP3 : ImageMagick (EulerOS-SA-2020-1390)NessusHuawei Local Security Checks
critical
131846EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2019-2354)NessusHuawei Local Security Checks
critical
95751openSUSE Security Update : ImageMagick (openSUSE-2016-1445)NessusSuSE Local Security Checks
high
95749openSUSE Security Update : ImageMagick (openSUSE-2016-1443)NessusSuSE Local Security Checks
high
95704openSUSE Security Update : GraphicsMagick (openSUSE-2016-1430)NessusSuSE Local Security Checks
critical
95453SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2016:2964-1)NessusSuSE Local Security Checks
critical
95422SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:2952-1)NessusSuSE Local Security Checks
high
95053Ubuntu 12.04 LTS / 14.04 LTS / 16.04 LTS / 16.10 : imagemagick vulnerabilities (USN-3131-1)NessusUbuntu Local Security Checks
critical
94754openSUSE Security Update : ImageMagick (openSUSE-2016-1282)NessusSuSE Local Security Checks
critical
94433SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:2667-1)NessusSuSE Local Security Checks
critical
94425openSUSE Security Update : ImageMagick (openSUSE-2016-1242)NessusSuSE Local Security Checks
critical
94305openSUSE Security Update : GraphicsMagick (openSUSE-2016-1230)NessusSuSE Local Security Checks
critical
94304openSUSE Security Update : GraphicsMagick (openSUSE-2016-1229)NessusSuSE Local Security Checks
critical
93115Debian DSA-3652-1 : imagemagick - security updateNessusDebian Local Security Checks
critical