CVE-2015-8896

MEDIO 6.5CVE-2015-8896 · Published 15/03/2017 · updated 17/06/2026

En resumen

CVE-2015-8896 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a imagemagick (imagemagick).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.9%, mayor que el 87.0% de las vulnerabilidades.
Solución: actualizar a 7.0.5-0, 6.9.4-0 o posterior.

Package	Affected versions	Patched versions
imagemagick imagemagick	`≥ 7.0.0-0, < 7.0.5-0< 6.9.4-0`	`7.0.5-06.9.4-0`

Description

Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file.

References

openwall.com/lists/oss-security/2015/10/07/2 · Mailing List
openwall.com/lists/oss-security/2015/10/08/3 · Mailing List
openwall.com/lists/oss-security/2016/06/02/13 · Mailing List
oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html · Third Party Advisory
securityfocus.com/bid/91027 · Third Party Advisory
access.redhat.com/errata/RHSA-2016:1237 · Third Party Advisory
bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1448803 · Issue Tracking
ImageMagick/ImageMagick commit 0f6fc2d · Issue Tracking

Más vulnerabilidades de imagemagick

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

imagemagick

≥ 7.0.0-0, < 7.0.5-0< 6.9.4-0

7.0.5-06.9.4-0

Más vulnerabilidades de imagemagick

Ver todo →