Imagemagick Compressed TIFF File Conversion Remote Code Execution (CVE-2016-8707)

An out-of-bounds write vulnerability exists in ImageMagick’s convert utility. The vulnerability is due to improper handling of TIFF image data when deflating an Adobe Deflate compressed TIFF image.A remote attacker could exploit this vulnerability by providing a specially crafted TIFF image to a target.

Leave a Reply