This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2016-8707 →
DEBIAN-CVE-2016-8707
An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lea...
Original description
The description as published by the source.
An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution. The vulnerability can be triggered through any user controlled TIFF that is handled by this functionality.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
imagemagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.0+dfsg-2"}]}]
Debian:13
imagemagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.0+dfsg-2"}]}]
Debian:14
imagemagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.0+dfsg-2"}]}]
References
- advisory security-tracker.debian.org