Home

CVE-2015-8895

Description

Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service (application crash) via a crafted length value, which triggers a buffer overflow.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
1.472

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Imagemagic (x64) 7.0.5Windows
Multiple vulnerabilities affected in Imagemagick 7.0.5Windows
Multiple Vulnerabilities are affected in ImageMagick 7.0.5Windows
Multiple Vulnerabilities are affected in Imagemagic (x64) 7.0.1-7Windows
Multiple Vulnerabilities are affected in Imagemagic 7.0.1-7Windows
Multiple Vulnerabilities are affected in ImageMagick 7.0.1-7Windows
Integer Overflow or Wraparound Vulnerability (CVE-2015-8895)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234