CVE-2016-10145 - Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact v

CVE-2016-10145

Summary

Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy.

References

Vulnerable Configurations

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	95749
confirm	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851483 https://github.com/ImageMagick/ImageMagick/commit/d23beebe7b1179fb75db1e85fbca3100e49593d9
debian	DSA-3799
gentoo	GLSA-201702-09
mlist	[oss-security] 20170116 CVE Request: Imagemagick: various flaws: memory corruption, out-of-bounds writes, memory leaks, double-frees, off-by-one errors [oss-security] 20170116 Re: CVE Request: Imagemagick: various flaws: memory corruption, out-of-bounds writes, memory leaks, double-frees, off-by-one errors

Last major update

04-11-2017 - 01:29

Published

24-03-2017 - 15:59

Last modified

04-11-2017 - 01:29