CVE-2016-6520

Sažetak

Buffer overflow in MagickCore/enhance.c in ImageMagick before 7.0.2-7 allows remote attackers to have unspecified impact via vectors related to pixel cache morphology.

Reference

http://www.imagemagick.org/script/changelog.php
http://www.openwall.com/lists/oss-security/2016/08/02/10
http://www.openwall.com/lists/oss-security/2016/08/02/6
http://www.securitytracker.com/id/1036502
https://github.com/ImageMagick/ImageMagick/commit/76401e172ea3a55182be2b8e2aca4d07270f6da6

CVSS

Base:	6.4
Impact:	4.9
Exploitability:	10.0

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	NONE	PARTIAL

CVSS vektor

AV:N/AC:L/Au:N/C:P/I:N/A:P

Zadnje važnije ažuriranje

13-04-2021 - 15:57

Objavljeno

13-12-2016 - 15:59