Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2015/10/07/2 | Mailing List Patch Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2015/10/08/3 | Mailing List Patch Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2016/06/02/13 | Mailing List Patch Third Party Advisory |
| http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html | Third Party Advisory |
| http://www.securityfocus.com/bid/91027 | Third Party Advisory VDB Entry |
| https://access.redhat.com/errata/RHSA-2016:1237 | Third Party Advisory |
| https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1448803 | Issue Tracking Patch Third Party Advisory |
| https://github.com/ImageMagick/ImageMagick/commit/0f6fc2d5bf8f500820c3dbcf0d23ee14f2d9f734 | Issue Tracking Patch Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
28 Apr 2021, 19:58
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:* cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* |
|
| References | (REDHAT) https://access.redhat.com/errata/RHSA-2016:1237 - Third Party Advisory | |
| References | (CONFIRM) http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - Third Party Advisory | |
| References | (MISC) https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1448803 - Issue Tracking, Patch, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 6.5 |
| CWE | NVD-CWE-Other |
Information
Published : 2017-03-15 19:59
Updated : 2023-12-10 12:01
NVD link : CVE-2015-8896
Mitre link : CVE-2015-8896
CVE.ORG link : CVE-2015-8896
JSON object : View
Products Affected
oracle
- linux
redhat
- enterprise_linux_server_aus
- enterprise_linux_workstation
- enterprise_linux_desktop
- enterprise_linux_eus
- enterprise_linux_server
- enterprise_linux_server_tus
imagemagick
- imagemagick
CWE