Bug 1378756 (CVE-2016-7524)

Summary: CVE-2016-7524 ImageMagick: heap-buffer-overflow in coders/meta.c
Product: [Other] Security Response Reporter: Adam Mariš <amaris>
Component: vulnerabilityAssignee: Red Hat Product Security <security-response-team>
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: abhgupta, dmcphers, ethan, jhorak, jialiu, jokerman, kseifried, lmeyer, mmccomas, nmurray, pahan, tiwillia
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-10-11 11:44:21 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On: 1378790    
Bug Blocks: 1378785    

Comment 1 Adam Mariš 2016-09-23 09:34:43 UTC
Created ImageMagick tracking bugs for this issue:

Affects: fedora-all [bug 1378790]

Comment 2 Stefan Cornelius 2016-10-11 11:44:21 UTC
This is a dupe of CVE-2016-7523.

In https://github.com/ImageMagick/ImageMagick/issues/96 "urban-warrior" also commented that this can't be reproduced - that's because the fix for catches this.

*** This bug has been marked as a duplicate of bug 1378754 ***

Comment 4 Doran Moppert 2020-02-10 04:31:56 UTC

This flaw was found to be a duplicate of CVE-2016-7523. Please see https://access.redhat.com/security/cve/CVE-2016-7523 for information about affected products and security errata.