CVE-2016-10068

The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted XML file.

References

Affected packages

Git / github.com/imagemagick/imagemagick

Affected ranges

Type: GIT
Repo: https://github.com/imagemagick/imagemagick
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

56d6e20de489113617cbbddaf41e92600a34db22

Database specific

vanir_signatures

[
    {
        "id": "CVE-2016-10068-b90eb1a4",
        "source": "https://github.com/imagemagick/imagemagick/commit/56d6e20de489113617cbbddaf41e92600a34db22",
        "signature_type": "Line",
        "target": {
            "file": "coders/msl.c"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "314931343870270497523692267714635664688",
                "281671882533326054843871040316331383643",
                "335392155968403377149417670880388007492"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2016-10068-caa32e96",
        "source": "https://github.com/imagemagick/imagemagick/commit/56d6e20de489113617cbbddaf41e92600a34db22",
        "signature_type": "Function",
        "target": {
            "file": "coders/msl.c",
            "function": "MSLStartElement"
        },
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "length": 128212.0,
            "function_hash": "146048233735681448314329580052630690666"
        }
    }
]

Git / github.com/imagemagick/imagemagick6

Affected ranges

Type: GIT
Repo: https://github.com/imagemagick/imagemagick6
Events: Introduced

0 Unknown introduced commit / All previous commits are affected