CVE-2016-5687

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2016-5687

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5687.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2016-5687

Related

Published

2016-12-13T15:59:00Z

Modified

2024-09-18T02:29:16.846717Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which triggers an out-of-bounds read.

References

Affected packages

Alpine:v3.2 / imagemagick

Package

Name: imagemagick
Purl: pkg:apk/alpine/imagemagick?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.9.6.8-r0

Affected versions

6.*

6.4.9.10-r0

6.5.0.10-r0

6.5.2.1-r0

6.5.3.2-r0

6.5.3.10-r0

6.5.4.10-r0

6.5.5.6-r0

6.5.7.3-r0

6.5.7.5-r0

6.5.7.10-r0

6.5.8.5-r0

6.5.8.5-r1

6.5.9.0-r0

6.5.9.0-r1

6.5.9.0-r2

6.5.9.0-r3

6.5.9.0-r4

6.6.0.4-r0

6.6.0.10-r0

6.6.0.10-r1

6.6.1.5-r0

6.6.2.0-r0

6.6.2.10-r0

6.6.3.0-r0

6.6.3.1-r0

6.6.3.4-r0

6.6.3.6-r0

6.6.3.9-r0

6.6.3.10-r0

6.6.4.0-r0

6.6.4.1-r0

6.6.4.6-r0

6.6.4.10-r0

6.6.5.5-r0

6.6.5.10-r0

6.6.6.7-r0

6.6.7.0-r0

6.6.7.4-r0

6.6.7.9-r0

6.6.7.9-r1

6.6.8.4-r0

6.6.8.7-r0

6.6.9.1-r0

6.6.9.3-r0

6.6.9.8-r0

6.6.9.8-r1

6.6.9.8-r2

6.6.9.8-r3

6.6.9.9-r0

6.6.9.9-r1

6.7.0.0-r0

6.7.0.3-r0

6.7.0.4-r0

6.7.0.6-r0

6.7.0.8-r0

6.7.0.9-r0

6.7.1.0-r0

6.7.2.2-r0

6.7.2.7-r0

6.7.2.9-r0

6.7.3.2-r0

6.7.3.7-r0

6.7.3.9-r0

6.7.4.0-r0

6.7.4.4-r0

6.7.4.6-r0

6.7.4.7-r0

6.7.4.10-r0

6.7.5.6-r0

6.7.5.7-r0

6.7.6.0-r0

6.7.6.7-r0

6.7.7.2-r0

6.7.7.5-r0

6.7.7.6-r0

6.7.8.0-r0

6.7.8.3-r0

6.7.8.6-r0

6.7.8.7-r0

6.7.8.7-r1

6.7.8.8-r0

6.7.8.10-r0

6.7.9.3-r0

6.7.9.9-r0

6.8.0.4-r0

6.8.0.7-r0

6.8.2.4-r0

6.8.5.3-r0

6.8.5.6-r0

6.8.5.6-r1

6.8.6.2-r0

6.8.6.3-r0

6.8.6.4-r0

6.8.6.5-r0

6.8.6.5-r1

6.8.6.9-r0

6.8.6.10-r0

6.8.7.0-r0

6.8.7.1-r0

6.8.7.3-r0

6.8.7.5-r0

6.8.7.7-r0

6.8.7.8-r0

6.8.7.9-r0

6.8.7.10-r0

6.8.8.0-r0

6.8.8.4-r0

6.8.8.4-r1

6.8.8.7-r1

6.8.8.9-r0

6.8.8.10-r0

6.8.9.1-r0

6.8.9.5-r0

6.8.9.10-r0

6.9.0.0-r0

6.9.1.0-r0

6.9.1.2-r0

6.9.1.2-r1

6.9.1.2-r2

Alpine:v3.3 / imagemagick

Package

Name: imagemagick
Purl: pkg:apk/alpine/imagemagick?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.9.6.8-r0

Affected versions

6.*

6.4.9.10-r0

6.5.0.10-r0

6.5.2.1-r0

6.5.3.2-r0

6.5.3.10-r0

6.5.4.10-r0

6.5.5.6-r0

6.5.7.3-r0

6.5.7.5-r0

6.5.7.10-r0

6.5.8.5-r0

6.5.8.5-r1

6.5.9.0-r0

6.5.9.0-r1

6.5.9.0-r2

6.5.9.0-r3

6.5.9.0-r4

6.6.0.4-r0

6.6.0.10-r0

6.6.0.10-r1

6.6.1.5-r0

6.6.2.0-r0

6.6.2.10-r0

6.6.3.0-r0

6.6.3.1-r0

6.6.3.4-r0

6.6.3.6-r0

6.6.3.9-r0

6.6.3.10-r0

6.6.4.0-r0

6.6.4.1-r0

6.6.4.6-r0

6.6.4.10-r0

6.6.5.5-r0

6.6.5.10-r0

6.6.6.7-r0

6.6.7.0-r0

6.6.7.4-r0

6.6.7.9-r0

6.6.7.9-r1

6.6.8.4-r0

6.6.8.7-r0

6.6.9.1-r0

6.6.9.3-r0

6.6.9.8-r0

6.6.9.8-r1

6.6.9.8-r2

6.6.9.8-r3

6.6.9.9-r0

6.6.9.9-r1

6.7.0.0-r0

6.7.0.3-r0

6.7.0.4-r0

6.7.0.6-r0

6.7.0.8-r0

6.7.0.9-r0

6.7.1.0-r0

6.7.2.2-r0

6.7.2.7-r0

6.7.2.9-r0

6.7.3.2-r0

6.7.3.7-r0

6.7.3.9-r0

6.7.4.0-r0

6.7.4.4-r0

6.7.4.6-r0

6.7.4.7-r0

6.7.4.10-r0

6.7.5.6-r0

6.7.5.7-r0

6.7.6.0-r0

6.7.6.7-r0

6.7.7.2-r0

6.7.7.5-r0

6.7.7.6-r0

6.7.8.0-r0

6.7.8.3-r0

6.7.8.6-r0

6.7.8.7-r0

6.7.8.7-r1

6.7.8.8-r0

6.7.8.10-r0

6.7.9.3-r0

6.7.9.9-r0

6.8.0.4-r0

6.8.0.7-r0

6.8.2.4-r0

6.8.5.3-r0

6.8.5.6-r0

6.8.5.6-r1

6.8.6.2-r0

6.8.6.3-r0

6.8.6.4-r0

6.8.6.5-r0

6.8.6.5-r1

6.8.6.9-r0

6.8.6.10-r0

6.8.7.0-r0

6.8.7.1-r0

6.8.7.3-r0

6.8.7.5-r0

6.8.7.7-r0

6.8.7.8-r0

6.8.7.9-r0

6.8.7.10-r0

6.8.8.0-r0

6.8.8.4-r0

6.8.8.4-r1

6.8.8.7-r1

6.8.8.9-r0

6.8.8.10-r0

6.8.9.1-r0

6.8.9.5-r0

6.8.9.10-r0

6.9.0.0-r0

6.9.1.0-r0

6.9.1.2-r0

6.9.1.4-r0

6.9.1.4-r1

6.9.1.4-r2

6.9.1.4-r3

6.9.2.0-r0

6.9.2.3-r0

6.9.2.5-r0

6.9.2.6-r0

6.9.2.7-r0

6.9.2.8-r0

6.9.2.8-r1

6.9.3.4-r0

6.9.3.10-r0

Alpine:v3.4 / imagemagick

Package

Name: imagemagick
Purl: pkg:apk/alpine/imagemagick?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.9.5.3

Affected versions

6.*

6.4.9.10-r0

6.5.0.10-r0

6.5.2.1-r0

6.5.3.2-r0

6.5.3.10-r0

6.5.4.10-r0

6.5.5.6-r0

6.5.7.3-r0

6.5.7.5-r0

6.5.7.10-r0

6.5.8.5-r0

6.5.8.5-r1

6.5.9.0-r0

6.5.9.0-r1

6.5.9.0-r2

6.5.9.0-r3

6.5.9.0-r4

6.6.0.4-r0

6.6.0.10-r0

6.6.0.10-r1

6.6.1.5-r0

6.6.2.0-r0

6.6.2.10-r0

6.6.3.0-r0

6.6.3.1-r0

6.6.3.4-r0

6.6.3.6-r0

6.6.3.9-r0

6.6.3.10-r0

6.6.4.0-r0

6.6.4.1-r0

6.6.4.6-r0

6.6.4.10-r0

6.6.5.5-r0

6.6.5.10-r0

6.6.6.7-r0

6.6.7.0-r0

6.6.7.4-r0

6.6.7.9-r0

6.6.7.9-r1

6.6.8.4-r0

6.6.8.7-r0

6.6.9.1-r0

6.6.9.3-r0

6.6.9.8-r0

6.6.9.8-r1

6.6.9.8-r2

6.6.9.8-r3

6.6.9.9-r0

6.6.9.9-r1

6.7.0.0-r0

6.7.0.3-r0

6.7.0.4-r0

6.7.0.6-r0

6.7.0.8-r0

6.7.0.9-r0

6.7.1.0-r0

6.7.2.2-r0

6.7.2.7-r0

6.7.2.9-r0

6.7.3.2-r0

6.7.3.7-r0

6.7.3.9-r0

6.7.4.0-r0

6.7.4.4-r0

6.7.4.6-r0

6.7.4.7-r0

6.7.4.10-r0

6.7.5.6-r0

6.7.5.7-r0

6.7.6.0-r0

6.7.6.7-r0

6.7.7.2-r0

6.7.7.5-r0

6.7.7.6-r0

6.7.8.0-r0

6.7.8.3-r0

6.7.8.6-r0

6.7.8.7-r0

6.7.8.7-r1

6.7.8.8-r0

6.7.8.10-r0

6.7.9.3-r0

6.7.9.9-r0

6.8.0.4-r0

6.8.0.7-r0

6.8.2.4-r0

6.8.5.3-r0

6.8.5.6-r0

6.8.5.6-r1

6.8.6.2-r0

6.8.6.3-r0

6.8.6.4-r0

6.8.6.5-r0

6.8.6.5-r1

6.8.6.9-r0

6.8.6.10-r0

6.8.7.0-r0

6.8.7.1-r0

6.8.7.3-r0

6.8.7.5-r0

6.8.7.7-r0

6.8.7.8-r0

6.8.7.9-r0

6.8.7.10-r0

6.8.8.0-r0

6.8.8.4-r0

6.8.8.4-r1

6.8.8.7-r1

6.8.8.9-r0

6.8.8.10-r0

6.8.9.1-r0

6.8.9.5-r0

6.8.9.10-r0

6.9.0.0-r0

6.9.1.0-r0

6.9.1.2-r0

6.9.1.4-r0

6.9.1.4-r1

6.9.1.4-r2

6.9.1.4-r3

6.9.2.0-r0

6.9.2.3-r0

6.9.2.5-r0

6.9.2.6-r0

6.9.2.7-r0

6.9.2.8-r0

6.9.2.8-r1

6.9.3.2-r0

6.9.3.5-r0

6.9.3.6-r0

6.9.3.7-r0

6.9.3.7-r1

6.9.3.8-r0

6.9.3.10-r0

6.9.4.0-r0

6.9.4.1-r0

Debian:11 / imagemagick

Package

Name: imagemagick
Purl: pkg:deb/debian/imagemagick?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8:6.9.6.2+dfsg-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / imagemagick

Package

Name: imagemagick
Purl: pkg:deb/debian/imagemagick?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8:6.9.6.2+dfsg-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / imagemagick

Package

Name: imagemagick
Purl: pkg:deb/debian/imagemagick?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8:6.9.6.2+dfsg-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/imagemagick/imagemagick

Affected ranges

Type: GIT
Repo: https://github.com/imagemagick/imagemagick
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

044a9bc056a8e0a7979009b41901e97640626257

Last affected

1a5fed605982a1a20e8e9bd57502e2ce94d7dc3e

Last affected

e46b7d19de7914881986ef939f690facc7a0198d

Last affected

f67a61425f27009d4ac16a62e31758e5af3a7226

Type: GIT
Repo: https://github.com/imagemagick/imagemagick6
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

dce8f08c7bf7a92c451f45a684ca96434684a69e

Affected versions

6.*

6.9.4-0

6.9.4-1

6.9.4-2

7.*

7.0.1-0

7.0.1-1