The ReadGROUP4Image function in coders/tiff.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service (crash) via a crafted image file.
The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Imagemagick | Imagemagick | * | 6.9.4-8 (excluding) |
| Imagemagick | Imagemagick | 7.0.0-0 (including) | 7.0.1-10 (excluding) |
| Imagemagick | Ubuntu | precise | * |
| Imagemagick | Ubuntu | trusty | * |
| Imagemagick | Ubuntu | upstream | * |
| Imagemagick | Ubuntu | xenial | * |
| Imagemagick | Ubuntu | yakkety | * |