CVE-2016-7530

The quantum handling code in ImageMagick allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds write) via a crafted file.

References

Affected packages

Git / github.com/imagemagick/imagemagick

Affected ranges

Type: GIT
Repo: https://github.com/imagemagick/imagemagick
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

63346f34f9d19179599b5b256e5e8d3dda46435c

Fixed

b5ed738f8060266bf4ae521f7e3ed145aa4498a3

Fixed

c4e63ad30bc42da691f2b5f82a24516dd6b4dc70

Type: GIT
Repo: https://github.com/imagemagick/imagemagick6
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

4bae9bed8a79e031884ca9a4681dce89dbd26855

Database specific

vanir_signatures

[
    {
        "signature_type": "Line",
        "id": "CVE-2016-7530-0922cb9a",
        "source": "https://github.com/imagemagick/imagemagick/commit/b5ed738f8060266bf4ae521f7e3ed145aa4498a3",
        "signature_version": "v1",
        "target": {
            "file": "magick/quantum.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "119004841677264278704629505408064653358",
                "113716437866341380968339424275026577676",
                "213788046492512370864356220996882122709",
                "36318200836616489339805252907813319471"
            ]
        },
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "id": "CVE-2016-7530-4c5a9aa1",
        "source": "https://github.com/imagemagick/imagemagick/commit/63346f34f9d19179599b5b256e5e8d3dda46435c",
        "signature_version": "v1",
        "target": {
            "file": "Magick++/tests/appendImages.cpp"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "308230813187503628149805877233850882378",
                "122744621927629324998830851397821250012",
                "141292732701133872893456974972184274140",
                "25447551733151959752730163145992302021"
            ]
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2016-7530-77b06e9c",
        "source": "https://github.com/imagemagick/imagemagick/commit/c4e63ad30bc42da691f2b5f82a24516dd6b4dc70",
        "signature_version": "v1",
        "target": {
            "function": "GetQuantumExtent",
            "file": "MagickCore/quantum.c"
        },
        "digest": {
            "function_hash": "119968278571635995698264616439755444266",
            "length": 784.0
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2016-7530-a1c32eb4",
        "source": "https://github.com/imagemagick/imagemagick/commit/b5ed738f8060266bf4ae521f7e3ed145aa4498a3",
        "signature_version": "v1",
        "target": {
            "function": "SetQuantumDepth",
            "file": "magick/quantum.c"
        },
        "digest": {
            "function_hash": "332167042944695826360154094160881951975",
            "length": 879.0
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2016-7530-b7ca42a0",
        "source": "https://github.com/imagemagick/imagemagick/commit/63346f34f9d19179599b5b256e5e8d3dda46435c",
        "signature_version": "v1",
        "target": {
            "function": "main",
            "file": "Magick++/tests/appendImages.cpp"
        },
        "digest": {
            "function_hash": "137741905161572851935849278483869719322",
            "length": 1771.0
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2016-7530-ec53b826",
        "source": "https://github.com/imagemagick/imagemagick/commit/c4e63ad30bc42da691f2b5f82a24516dd6b4dc70",
        "signature_version": "v1",
        "target": {
            "function": "SetQuantumDepth",
            "file": "MagickCore/quantum.c"
        },
        "digest": {
            "function_hash": "81852159700192920520102896297840322435",
            "length": 920.0
        },
        "deprecated": false
    }
]