CVE-2016-7525

Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.

References

Affected packages

Git / github.com/imagemagick/imagemagick

Affected ranges

Type: GIT
Repo: https://github.com/imagemagick/imagemagick
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

5f16640725b1225e6337c62526e6577f0f88edb8

Type: GIT
Repo: https://github.com/imagemagick/imagemagick6
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

4bae9bed8a79e031884ca9a4681dce89dbd26855

Database specific

{
    "vanir_signatures": [
        {
            "id": "CVE-2016-7525-34a85264",
            "signature_type": "Function",
            "digest": {
                "function_hash": "200784355120287115026222795293801344309",
                "length": 175.0
            },
            "target": {
                "file": "coders/psd.c",
                "function": "GetPSDRowSize"
            },
            "deprecated": false,
            "signature_version": "v1",
            "source": "https://github.com/imagemagick/imagemagick/commit/5f16640725b1225e6337c62526e6577f0f88edb8"
        },
        {
            "id": "CVE-2016-7525-474e7aa1",
            "signature_type": "Line",
            "digest": {
                "line_hashes": [
                    "215607599192634220103728279697072946960",
                    "275708350574655993031146397799734696077",
                    "204778768046094766577080457605733279128",
                    "65874670408230008788635498278935024796"
                ],
                "threshold": 0.9
            },
            "target": {
                "file": "coders/psd.c"
            },
            "deprecated": false,
            "signature_version": "v1",
            "source": "https://github.com/imagemagick/imagemagick/commit/5f16640725b1225e6337c62526e6577f0f88edb8"
        }
    ]
}