medium5.5
CVE-2015-8894
Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service (application crash) via a crafted…
Impact
Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service (application crash) via a crafted tga file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Imagemagick | Imagemagick | Versions 7.0.1-0, 7.0.1-1, 7.0.1-2, 7.0.1-3, 7.0.1-4, 7.0.1-5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2016/06/02/13
- https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1490362
- https://github.com/ImageMagick/ImageMagick/commit/4f68e9661518463fca523c9726bb5d940a2aa6d8
- http://www.openwall.com/lists/oss-security/2016/06/02/13
- https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1490362
- https://github.com/ImageMagick/ImageMagick/commit/4f68e9661518463fca523c9726bb5d940a2aa6d8