CVE-2016-10146 - Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers t

CVE-2016-10146

Summary

Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

References

Vulnerable Configurations

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

CVSS

Base:	7.8 (as of 04-11-2017 - 01:29)
Impact:
Exploitability:

CWE

CWE-399

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:C

refmap via4

bid	95744
confirm	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851380 https://github.com/ImageMagick/ImageMagick/commit/aeff00de228bc5a158c2a975ab47845d8a1db456
debian	DSA-3799
gentoo	GLSA-201702-09
mlist	[oss-security] 20170116 CVE Request: Imagemagick: various flaws: memory corruption, out-of-bounds writes, memory leaks, double-frees, off-by-one errors [oss-security] 20170116 Re: CVE Request: Imagemagick: various flaws: memory corruption, out-of-bounds writes, memory leaks, double-frees, off-by-one errors

Last major update

04-11-2017 - 01:29

Published

24-03-2017 - 15:59

Last modified

04-11-2017 - 01:29