Skip to main content

Numeric Errors

CVE-2015-8896

Severity Medium
Score 6.5/10

Summary

Integer truncation issue in "coders/pict.c" in ImageMagick before 6.9.4-0, 7.x prior to 7.0.1-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • REQUIRED
  • NONE
  • NONE
  • HIGH

CWE-189 - Numeric Errors

Weaknesses in this category are related to improper calculation or conversion of numbers.

Advisory Timeline

  • Published