CVE-2016-7800 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Graphicsmagick
Severity
7.5HIGHNVD
EPSS
2.2%
top 15.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 6
Latest updateMay 14
Description
Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM chunk, which triggers a heap-based buffer overflow.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6
Affected Packages5 packages
Also affects: Debian Linux 8.0
🔴Vulnerability Details
2📋Vendor Advisories
1Debian▶
CVE-2016-7800: graphicsmagick - Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1...↗2016
💬Community
5Bugzilla▶
CVE-2016-7800 CVE-2016-7996 CVE-2016-7997 CVE-2016-8682 CVE-2016-8683 CVE-2016-8684 CVE-2016-9830 GraphicsMagick: various flaws [epel-all]↗2016-10-10
Bugzilla▶
CVE-2016-7800 CVE-2016-7996 CVE-2016-7997 CVE-2016-8682 CVE-2016-8683 CVE-2016-8684 CVE-2016-9830 GraphicsMagick: various flaws [fedora-all]↗2016-10-10
Bugzilla▶
CVE-2016-7800 GraphicsMagick: 8BIM/8BIMW unsigned underflow leads to heap overflow [epel-all]↗2016-10-03
Bugzilla
▶
Bugzilla▶
CVE-2016-7800 GraphicsMagick: 8BIM/8BIMW unsigned underflow leads to heap overflow [fedora-all]↗2016-10-03