CVE-2016-7521

Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.

References

Affected packages

Debian:11 / imagemagick

Package

Name: imagemagick
Purl: pkg:deb/debian/imagemagick?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8:6.9.6.2+dfsg-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / imagemagick

Package

Name: imagemagick
Purl: pkg:deb/debian/imagemagick?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8:6.9.6.2+dfsg-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / imagemagick

Package

Name: imagemagick
Purl: pkg:deb/debian/imagemagick?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8:6.9.6.2+dfsg-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:14 / imagemagick

Package

Name: imagemagick
Purl: pkg:deb/debian/imagemagick?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8:6.9.6.2+dfsg-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/imagemagick/imagemagick

Affected ranges

Type: GIT
Repo: https://github.com/imagemagick/imagemagick
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

30eec879c8b446b0ea9a3bb0da1a441cc8482bc4

Type: GIT
Repo: https://github.com/imagemagick/imagemagick6
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

4bae9bed8a79e031884ca9a4681dce89dbd26855

Database specific

{
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "175923781266397434596439577613250783271",
                    "247495387716371465050858595938823156163",
                    "2931961638342073742908334328772865753",
                    "119484566557434995771045979942836017695",
                    "201593293178007003943730840612112783384",
                    "78485053470786231645736915884946123196",
                    "301271024079427872513535444839942357582",
                    "176555368913346940919697433192867184296"
                ],
                "threshold": 0.9
            },
            "signature_type": "Line",
            "target": {
                "file": "coders/psd.c"
            },
            "source": "https://github.com/imagemagick/imagemagick/commit/30eec879c8b446b0ea9a3bb0da1a441cc8482bc4",
            "id": "CVE-2016-7521-0cd3ef7a"
        },
        {
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "function_hash": "97281487287534598895735610321528777022",
                "length": 2538.0
            },
            "signature_type": "Function",
            "target": {
                "file": "coders/psd.c",
                "function": "DecodePSDPixels"
            },
            "source": "https://github.com/imagemagick/imagemagick/commit/30eec879c8b446b0ea9a3bb0da1a441cc8482bc4",
            "id": "CVE-2016-7521-ec1a2ae1"
        }
    ]
}