Home

CVE-2016-6491

Description

Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause a denial of service (out-of-bounds read, memory leak, and crash) via a crafted image.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
1.084

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Imagemagic (x64) 7.0.2Windows
Multiple vulnerabilities affected in Imagemagick 7.0.2Windows
Multiple Vulnerabilities are affected in ImageMagick 7.0.2Windows
Multiple Vulnerabilities are affected in Imagemagic (x64) 7.0.1-7Windows
Multiple Vulnerabilities are affected in Imagemagic 7.0.1-7Windows
Multiple Vulnerabilities are affected in ImageMagick 7.0.1-7Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234