p PatchFirst

CVE-2016-8707

CVE-2016-8707

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution. The vulnerability can be triggered through any user controlled TIFF that is handled by this functionality.

CVSS 7.5 · High · EPSS 3.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • imagemagick 7.0.3-1

    Versions
    • ImageMagick 7.0.3-1: Affected

    No fix published

  • imagemagick Debian:12

    Affected ranges
    • ECOSYSTEM: < 8:6.9.7.0+dfsg-2

    Update to 8:6.9.7.0+dfsg-2

  • imagemagick Debian:13

    Affected ranges
    • ECOSYSTEM: < 8:6.9.7.0+dfsg-2

    Update to 8:6.9.7.0+dfsg-2

  • imagemagick Debian:14

    Affected ranges
    • ECOSYSTEM: < 8:6.9.7.0+dfsg-2

    Update to 8:6.9.7.0+dfsg-2

  • imagemagick Ubuntu:14.04:LTS

    Versions
    • 8:6.7.7.10-5ubuntu3
    • 8:6.7.7.10-5ubuntu4
    • 8:6.7.7.10-6ubuntu1
    • 8:6.7.7.10-6ubuntu2
    • 8:6.7.7.10-6ubuntu3
    • 8:6.7.7.10-6ubuntu3.1
    • 8:6.7.7.10-6ubuntu3.2
    • 8:6.7.7.10-6ubuntu3.3
    • 8:6.7.7.10-6ubuntu3.4
    Affected ranges
    • ECOSYSTEM: < 8:6.7.7.10-6ubuntu3.5

    Update to 8:6.7.7.10-6ubuntu3.5

  • imagemagick Ubuntu:16.04:LTS

    Versions
    • 8:6.8.9.9-5ubuntu2
    • 8:6.8.9.9-6
    • 8:6.8.9.9-6build1
    • 8:6.8.9.9-7
    • 8:6.8.9.9-7ubuntu1
    • 8:6.8.9.9-7ubuntu2
    • 8:6.8.9.9-7ubuntu3
    • 8:6.8.9.9-7ubuntu4
    • 8:6.8.9.9-7ubuntu5
    • 8:6.8.9.9-7ubuntu5.1
    • 8:6.8.9.9-7ubuntu5.2
    • 8:6.8.9.9-7ubuntu5.3
    • 8:6.8.9.9-7ubuntu5.4
    Affected ranges
    • ECOSYSTEM: < 8:6.8.9.9-7ubuntu5.5

    Update to 8:6.8.9.9-7ubuntu5.5

Original sources

Check your server →