CVE-2016-7528

The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted VIFF file.

References

Affected packages

Git / github.com/imagemagick/imagemagick

Affected ranges

Type: GIT
Repo: https://github.com/imagemagick/imagemagick
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

7be16a280014f895a951db4948df316a23dabc09

Fixed

ca0c886abd6d3ef335eb74150cd23b89ebd17135

Type: GIT
Repo: https://github.com/imagemagick/imagemagick6
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

4bae9bed8a79e031884ca9a4681dce89dbd26855

Database specific

{
    "vanir_signatures": [
        {
            "id": "CVE-2016-7528-26e763ed",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "73400276544282883505727135453538747015",
                    "68630530501493298963399791193204282036",
                    "308880268057827532427875355983393946834",
                    "179069771209205453139337767597084181451",
                    "134880778367632535309539072403867201631"
                ]
            },
            "signature_version": "v1",
            "target": {
                "file": "coders/viff.c"
            },
            "deprecated": false,
            "signature_type": "Line",
            "source": "https://github.com/imagemagick/imagemagick/commit/7be16a280014f895a951db4948df316a23dabc09"
        },
        {
            "id": "CVE-2016-7528-857b0d67",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "73400276544282883505727135453538747015",
                    "68630530501493298963399791193204282036",
                    "308880268057827532427875355983393946834",
                    "179069771209205453139337767597084181451",
                    "65688560844318694106731520456490867518"
                ]
            },
            "signature_version": "v1",
            "target": {
                "file": "coders/viff.c"
            },
            "deprecated": false,
            "signature_type": "Line",
            "source": "https://github.com/imagemagick/imagemagick/commit/ca0c886abd6d3ef335eb74150cd23b89ebd17135"
        },
        {
            "id": "CVE-2016-7528-a363d176",
            "digest": {
                "length": 15347.0,
                "function_hash": "273154292058683672639246058856918388300"
            },
            "signature_version": "v1",
            "target": {
                "file": "coders/viff.c",
                "function": "ReadVIFFImage"
            },
            "deprecated": false,
            "signature_type": "Function",
            "source": "https://github.com/imagemagick/imagemagick/commit/7be16a280014f895a951db4948df316a23dabc09"
        },
        {
            "id": "CVE-2016-7528-eb2bbdb6",
            "digest": {
                "length": 15285.0,
                "function_hash": "140674290307760993668289752721006000367"
            },
            "signature_version": "v1",
            "target": {
                "file": "coders/viff.c",
                "function": "ReadVIFFImage"
            },
            "deprecated": false,
            "signature_type": "Function",
            "source": "https://github.com/imagemagick/imagemagick/commit/ca0c886abd6d3ef335eb74150cd23b89ebd17135"
        }
    ]
}