6.8
CVSSv2

CVE-2016-8862

Published: 15/02/2017 Updated: 26/04/2021
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick prior to 7.0.3.3 allows remote malicious users to have unspecified impact via a crafted image, which triggers a memory allocation failure.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

imagemagick imagemagick

debian debian linux 8.0

Vendor Advisories

Several security issues were fixed in ImageMagick ...
Several issues have been discovered in ImageMagick, a popular set of programs and libraries for image manipulation These issues include several problems in memory handling that can result in a denial of service attack or in execution of arbitrary code by an attacker with control on the image input For the stable distribution (jessie), these probl ...
Debian Bug report logs - #859025 imagemagick: CVE-2017-7275 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 29 Mar 2017 16:36:01 UTC Severity: minor Tags: fixed-upstre ...
Debian Bug report logs - #845195 Imagemagick (jessie and older) buffer overflow Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Mon, 21 Nov 2016 11:30:01 UTC Severit ...
Debian Bug report logs - #845212 Fix out of bound read in viff file handling Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Mon, 21 Nov 2016 14:15:01 UTC Severity: ...
Debian Bug report logs - #845213 Suspend exception processing if there are too many exceptions Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Mon, 21 Nov 2016 14:15: ...
Debian Bug report logs - #845196 Check return of write function Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Mon, 21 Nov 2016 11:42:01 UTC Severity: important Tag ...
Debian Bug report logs - #845242 imagemagick: CVE-2016-9556: Heap buffer overflow in heap-buffer-overflow in IsPixelGray Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Dat ...
Debian Bug report logs - #845243 imagemagick: CVE-2016-9559: null pointer passed as argument 2, which is declared to never be null Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom ...
Debian Bug report logs - #840437 CVE-2016-7799 mogrify global buffer overflow Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 11 Oct 2016 15:21:02 UTC Severity: ...
Debian Bug report logs - #845634 CVE-2016-8862: imagemagick: memory allocation failure in AcquireMagickMemory (memoryc) Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Dat ...
Debian Bug report logs - #840435 CVE-2016-7906 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 11 Oct 2016 15:15:04 UTC Severity: grave Tags: patch, security F ...
Debian Bug report logs - #845206 CVE-2016-8677: memory allocate failure in AcquireQuantumPixels Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Mon, 21 Nov 2016 12:57 ...
Debian Bug report logs - #845198 Check validity of extend during TIFF file reading Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Mon, 21 Nov 2016 11:51:01 UTC Seve ...
Debian Bug report logs - #845202 Better check for bufferoverflow for TIFF handling Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Mon, 21 Nov 2016 12:39:01 UTC Seve ...
Debian Bug report logs - #845246 mat file out of bound Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Mon, 21 Nov 2016 17:51:04 UTC Severity: grave Tags: patch, sec ...
Debian Bug report logs - #845244 Add check for invalid mat file Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Mon, 21 Nov 2016 17:48:06 UTC Severity: grave Tags: p ...
The AcquireMagickMemory function in MagickCore/memoryc in ImageMagick before 7033 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure ...