NVD

Id
20974  
Name
CVE-2016-5841  
Description
Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via vectors involving the offset variable.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-12-13  
Modified Date
2016-12-14  
Seq
2016-5841  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
114282 20974 CVE-2016-5841 [oss-security] 20160623 Fwd: out-of-bounds read in MagickCore/property.c:1396 could lead to memory leak/ Integer overflow read to RCE  View
114283 20974 CVE-2016-5841 [oss-security] 20160625 Re: Fwd: out-of-bounds read in MagickCore/property.c:1396 could lead to memory leak/ Integer overflow read to RCE  View
114284 20974 CVE-2016-5841 http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html  View
114285 20974 CVE-2016-5841 91394  View
114286 20974 CVE-2016-5841 https://github.com/ImageMagick/ImageMagick/commit/d8ab7f046587f2e9f734b687ba7e6e10147c294b  View
114287 20974 CVE-2016-5841 https://github.com/ImageMagick/ImageMagick/commits/7.0.2-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64596 JVNDB-2016-006371 ImageMagick の MagickCore/profile.c における整数オーバーフローの脆弱性 ImageMagick の MagickCore/profile.c には、整数オーバーフローの脆弱性が存在します。 CVE-2016-5841 92348 CVE-2016-5841 20974 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006371.html 2016-06-23 2016-12-22 View