Home CVE Database CVE-2016-8866

CVE-2016-8866

Description

The AcquireMagickMemory function in MagickCore/memory.c in GraphicsMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862.

Priority: MEDIUM
CVSS v3: 7.8
Publish Date: Feb 15, 2017
Related ID: --
CVSS v2: High
Modified Date: Feb 15, 2017

Find out more about CVE-2016-8866 from the MITRE-CVE dictionary and NIST NVD


Products Affected

Login may be required to access defects or downloads.

Related Products

Product Name Status Defect Fixed Downloads
Linux 7 SCP Not Vulnerable -- -- --
Linux 7 CGP Not Vulnerable -- -- --

Comments

imagemagick

Live chat
Online