CVE-2016-8707 is an out-of-bounds write vulnerability in ImageMagick's convert utility, specifically affecting the handling of compressed TIFF images, impacting Debian Linux and ImageMagick itself. With a CVSS score of 7.8 (High), it can be triggered by a crafted TIFF document, potentially leading to remote code execution through user interaction. While no public exploits or Metasploit modules are available, and there's minimal community discussion or media coverage, its FAUCET Risk Score of 63/100 indicates a moderate risk. This vulnerability is not currently on CISA's Known Exploited Vulnerabilities (KEV) catalog.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
7.0.3-1CPE matchmatch criteria | cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:* | ||
8.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.