CVE-2016-7997 Null dereference in n/a
Remote attackers can cause a denial of service via a null pointer dereference in the WPG format reader of GraphicsMagick.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-7997?
CVE-2016-7997 is a high-severity vulnerability in Graphicsmagick Graphicsmagick, published on 18 Jan 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (assertion failure and crash) via vectors related to a ReferenceBlob and a NULL pointer.
Weakness: CWE-476
Which versions are affected by CVE-2016-7997?
It affects 1 product.
Products include Graphicsmagick Graphicsmagick.
How do I fix CVE-2016-7997?
Upgrade to a fixed version.
Is CVE-2016-7997 being exploited?
There is no known exploitation of CVE-2016-7997 in the wild and no public exploit code.
Other vulnerabilities in Graphicsmagick Graphicsmagick
Sources
Also known as DEBIAN-CVE-2016-7997, GHSA-92gw-mq7m-p8c6, UBUNTU-CVE-2016-7997.