CVE-2016-5841
PoC —CVSS 3.0
9.8 critical
EPSS
13%p96
Published
()
Modified
Description
Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via vectors involving the offset variable.
- Vendors
- imagemagickoracle
- Products
- imagemagick, solaris
- Weakness
- CWE-190
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.