Test ID:	1.3.6.1.4.1.25623.1.0.810250
Category:	General
Title:	ImageMagick WPG Parser Heap Buffer Overflow And Invalid Write Vulnerabilities - Windows
Summary:	ImageMagick is prone to multiple vulnerabilities.
Description:	Summary: ImageMagick is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to a heap based buffer overflow error in the SetPixelIndex function and an invalid write operation in the ScaleCharToQuantum or SetPixelIndex functions. Vulnerability Impact: Successful exploitation will allow remote attackers to cause some unspecified impacts. Affected Software/OS: ImageMagick versions before 6.9.4-4 and 7.x before 7.0.1-5 on Windows. Solution: Upgrade to ImageMagick version 6.9.4-4 or 7.0.1-5 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-5688 BugTraq ID: 91283 http://www.securityfocus.com/bid/91283 https://blog.fuzzing-project.org/46-Various-invalid-memory-reads-in-ImageMagick-WPG,-DDS,-DCM.html http://www.openwall.com/lists/oss-security/2016/06/14/5 http://www.openwall.com/lists/oss-security/2016/06/17/3
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.