CVE:CVE-2016-8866
CNNVD:CNNVD-201702-550
GraphicsMagick是一套简单的图像处理工具。该工具对图像提供尺寸调整、旋转、加亮等功能。
GraphicsMagick 7.0.3.8之前的7.0.3.3版本中的MagickCore/memory.c文件的‘AcquireMagickMemory’函数存在安全漏洞。远程攻击者可借助特制的图片利用该漏洞造成分配内存失败。
solution:Upgrade imagemagick imagemagick to a higher version than 6.9.6-6,7.0.3-7,and avoid the version (,6.9.6-6),[7.0.0-0,7.0.3-7]; Upgrade opensuse leap to a higher version than 42.1,42.2,and avoid the version 42.1,42.2; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2