Home

CVE-2016-7906

Description

magick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to cause a denial of service (use-after-free) via a crafted file.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.468

Associated Vulnerability

VulnerabilityOS Platform
Vulnerability CVE-2016-7799,CVE-2016-7906,CVE-2016-8677,CVE-2016-8707 are affected in Imagemagic (x64) 7.0.3Windows
Vulnerability CVE-2016-7799,CVE-2016-7906,CVE-2016-8677,CVE-2016-8707 are affected in Imagemagic 7.0.3Windows
Multiple Vulnerabilities are affected in ImageMagick 7.0.3Windows
imagemagick security update(DSA-3726-1) imagemagick_6.8.9.9-5+deb8u6_i386.debLinux
imagemagick security update(DSA-3726-1) imagemagick_6.8.9.9-5+deb8u6_amd64.debLinux
imagemagick security update(DSA-3726-1) imagemagick_6.8.9.9-5+deb8u6_kfreebsd-i386.debLinux
imagemagick security update(DSA-3726-1) imagemagick_6.8.9.9-5+deb8u6_kfreebsd-amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234