CVE-2016-10059

Buffer overflow in coders/tiff.c in ImageMagick before 6.9.4-1 allows remote attackers to cause a denial of service (application crash) or have unspecified other impact via a crafted TIFF file.

References

Affected packages

Git / github.com/imagemagick/imagemagick

Affected ranges

Type: GIT
Repo: https://github.com/imagemagick/imagemagick
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

58cf5bf4fade82e3b510e8f3463a967278a3e410

Type: GIT
Repo: https://github.com/imagemagick/imagemagick6
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

4bae9bed8a79e031884ca9a4681dce89dbd26855

Affected versions

6.*

6.9.4-0

Database specific

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 22985.0,
                "function_hash": "46844506430865017157779661333331991959"
            },
            "target": {
                "function": "ReadTIFFImage",
                "file": "coders/tiff.c"
            },
            "signature_version": "v1",
            "signature_type": "Function",
            "id": "CVE-2016-10059-327e22b0",
            "source": "https://github.com/imagemagick/imagemagick/commit/58cf5bf4fade82e3b510e8f3463a967278a3e410",
            "deprecated": false
        },
        {
            "digest": {
                "line_hashes": [
                    "30084234567020470244921781857671344244",
                    "46917590751996641588394695207195500099",
                    "142676019889728145191261000839290450224",
                    "270302288927828745745005357868389931743",
                    "85297856614803582436110873697226801800"
                ],
                "threshold": 0.9
            },
            "target": {
                "file": "coders/jpeg.c"
            },
            "signature_version": "v1",
            "signature_type": "Line",
            "id": "CVE-2016-10059-6a8cf1af",
            "source": "https://github.com/imagemagick/imagemagick/commit/58cf5bf4fade82e3b510e8f3463a967278a3e410",
            "deprecated": false
        },
        {
            "digest": {
                "line_hashes": [
                    "306347563246860832379968629154438407220",
                    "322746736395994799549064672264417146918",
                    "111441152033057223604311816348659031877",
                    "315123091794439334288278428368018156190",
                    "256277737091639211646941759846973747143",
                    "52929853092328943966989262005895798708",
                    "263642969953254076559218964991482558536",
                    "197495466917042746199095003208821181530",
                    "42100060933742766084748798323331643049"
                ],
                "threshold": 0.9
            },
            "target": {
                "file": "coders/tiff.c"
            },
            "signature_version": "v1",
            "signature_type": "Line",
            "id": "CVE-2016-10059-9fd9f146",
            "source": "https://github.com/imagemagick/imagemagick/commit/58cf5bf4fade82e3b510e8f3463a967278a3e410",
            "deprecated": false
        }
    ]
}