CVE-2016-10057observed exploitation

CVE-2016-10057

Published · Updated

25Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendepss 1.7%
from disclosure to weapon
Published on NVDMar 23
VulnCheck+1069d
exploitation probability
1.7%top 23% of all CVEs
observed exploitation
yesVulnCheck
Buffer overflow in the WriteGROUP4Image function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
Affected products
n/a · n/a
References
https://bugzilla.redhat.com/show_bug.cgi?id=1410466https://github.com/ImageMagick/ImageMagick/commit/10b3823a7619ed22d42764733eb052c4159bc8c1https://github.com/ImageMagick/ImageMagick/commit/eedd0c35bb2d8af7aa05f215689fdebd11633fa1http://www.openwall.com/lists/oss-security/2016/12/26/9http://www.securityfocus.com/bid/95192