Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

Vulnerability Intelligence

Customers

Vulnerability IntelligenceCVE-2016-10051

CVE-2016-10051

HIGH7.8

Use-after-free vulnerability in the ReadPWPImage function in coders/pwp

Published Mar 23, 2017

Modified 1 years ago

Details

Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.

References

ADVISORY

http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html

ADVISORY

http://lists.opensuse.org/opensuse-updates/2017-02/msg00031.html

WEB

http://www.openwall.com/lists/oss-security/2016/12/26/9

WEB

http://www.securityfocus.com/bid/95187

WEB

https://bugzilla.redhat.com/show_bug.cgi?id=1410456

WEB

https://github.com/ImageMagick/ImageMagick/commit/548701354191a3dda5cffc6d415374b35b01d0b9

WEB

https://github.com/ImageMagick/ImageMagick/commit/ecc03a2518c2b7dd375fde3a040fdae0bdf6a521

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2016-10051

WEB

https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=30245

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedMar 23, 2017

ModifiedAug 6, 2024

CVE-2016-10051 | Mondoo Vulnerability Intelligence