CVE-2017-16546

The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of service (use of uninitialized data or invalid memory allocation) or possibly have unspecified other impact via a malformed WPG file.

References

Affected packages

Git / github.com/imagemagick/imagemagick

Affected ranges

Type: GIT
Repo: https://github.com/imagemagick/imagemagick
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

2130bf6f89ded32ef0c88a11694f107c52566c53

Fixed

e04cf3e9524f50ca336253513d977224e083b816

Affected versions

7.*

7.0.1-0

7.0.1-1

7.0.1-10

7.0.1-2

7.0.1-3

7.0.1-4

7.0.1-5

7.0.1-6

7.0.1-7

7.0.1-8

7.0.1-9

7.0.2-0

7.0.2-1

7.0.2-10

7.0.2-2

7.0.2-3

7.0.2-4

7.0.2-5

7.0.2-6

7.0.2-7

7.0.2-8

7.0.2-9

7.0.3-0

7.0.3-1

7.0.3-10

7.0.3-2

7.0.3-3

7.0.3-4

7.0.3-5

7.0.3-6

7.0.3-7

7.0.3-8

7.0.3-9

7.0.4-0

7.0.4-1

7.0.4-10

7.0.4-2

7.0.4-3

7.0.4-4

7.0.4-5

7.0.4-6

7.0.4-7

7.0.4-8

7.0.4-9

7.0.5-0

7.0.5-1

7.0.5-10

7.0.5-2

7.0.5-3

7.0.5-4

7.0.5-5

7.0.5-6

7.0.5-7

7.0.5-8

7.0.5-9

7.0.6-0

7.0.6-1

7.0.6-2

7.0.6-3

7.0.6-4

7.0.6-5

7.0.6-6

7.0.6-7

7.0.6-8

7.0.6-9

7.0.7-0

7.0.7-1

7.0.7-2

7.0.7-3

7.0.7-4

7.0.7-5

7.0.7-6

7.0.7-8

7.0.7-9

7.0.7.7

Database specific

vanir_signatures

[
    {
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "239037879911661576146958638240697473991",
                "6775137549662369651095735069313677055",
                "230263286374246415018531447678239154621",
                "167777559930016920714550450146410033513"
            ]
        },
        "target": {
            "file": "coders/wpg.c"
        },
        "id": "CVE-2017-16546-1a59bbd4",
        "source": "https://github.com/imagemagick/imagemagick/commit/2130bf6f89ded32ef0c88a11694f107c52566c53",
        "signature_type": "Line"
    },
    {
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "function_hash": "120950539745086131144898489314772176044",
            "length": 12071.0
        },
        "target": {
            "function": "ReadWPGImage",
            "file": "coders/wpg.c"
        },
        "id": "CVE-2017-16546-71e01bf3",
        "source": "https://github.com/imagemagick/imagemagick/commit/e04cf3e9524f50ca336253513d977224e083b816",
        "signature_type": "Function"
    },
    {
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "function_hash": "45674372341530071912301067453092590117",
            "length": 12161.0
        },
        "target": {
            "function": "ReadWPGImage",
            "file": "coders/wpg.c"
        },
        "id": "CVE-2017-16546-9dbc3eb1",
        "source": "https://github.com/imagemagick/imagemagick/commit/2130bf6f89ded32ef0c88a11694f107c52566c53",
        "signature_type": "Function"
    },
    {
        "deprecated": false,
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "6775137549662369651095735069313677055",
                "230263286374246415018531447678239154621",
                "265662654767131670731158258118047212943",
                "328812252873929144357777357305708714005"
            ]
        },
        "target": {
            "file": "coders/wpg.c"
        },
        "id": "CVE-2017-16546-b18edb87",
        "source": "https://github.com/imagemagick/imagemagick/commit/e04cf3e9524f50ca336253513d977224e083b816",
        "signature_type": "Line"
    }
]