The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of the fwrite function, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Imagemagick | Imagemagick | * | 7.0.1-10 (excluding) |
| Imagemagick | Ubuntu | devel | * |
| Imagemagick | Ubuntu | esm-infra-legacy/trusty | * |
| Imagemagick | Ubuntu | esm-infra/xenial | * |
| Imagemagick | Ubuntu | precise | * |
| Imagemagick | Ubuntu | trusty | * |
| Imagemagick | Ubuntu | trusty/esm | * |
| Imagemagick | Ubuntu | xenial | * |
| Imagemagick | Ubuntu | yakkety | * |
References
- http://www.debian.org/security/2017/dsa-3799
- http://www.openwall.com/lists/oss-security/2016/12/26/9
- http://www.securityfocus.com/bid/95209
- https://bugzilla.redhat.com/show_bug.cgi?id=1410473
- https://github.com/ImageMagick/ImageMagick/issues/196
- http://www.debian.org/security/2017/dsa-3799
- http://www.openwall.com/lists/oss-security/2016/12/26/9
- http://www.securityfocus.com/bid/95209
- https://bugzilla.redhat.com/show_bug.cgi?id=1410473
- https://github.com/ImageMagick/ImageMagick/issues/196