CVE Catalog
CVE-2016-5841
CriticalSummary
Integer overflow in profile.c in ImageMagick before version 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via manipulation of the offset variable.
Risk Assessment
Attackers may exploit this vulnerability to disrupt service or gain control over the system, posing a significant security risk to the organization.
Recommendation
It is recommended to update ImageMagick to version 7.0.2-1 or later to mitigate this vulnerability.
Original NVD description (English source)
Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via vectors involving the offset variable.