CVE-2016-6823 Integer overflow in n/a
Remote attackers can cause a denial of service via crafted BMP images triggering an integer overflow and out-of-bounds write in ImageMagick.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-6823?
CVE-2016-6823 is a high-severity vulnerability in Imagemagick Imagemagick, published on 18 Jan 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (crash) via crafted height and width values, which triggers an out-of-bounds write.
Weakness: CWE-190
Which versions are affected by CVE-2016-6823?
It affects 1 product.
Products include Imagemagick Imagemagick.
How do I fix CVE-2016-6823?
Upgrade to a fixed version.
Is CVE-2016-6823 being exploited?
There is no known exploitation of CVE-2016-6823 in the wild and no public exploit code.
Other vulnerabilities in Imagemagick Imagemagick
Sources
Also known as DEBIAN-CVE-2016-6823, GHSA-m5cf-9j9f-j4xc, UBUNTU-CVE-2016-6823.