ZeroHour

CVE-2016-7800

CVSS 3.0
7.5 high
EPSS
4%p89
Published
()
Modified
Description

Integer underflow in the parse8BIM function in coders/meta.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM chunk, which triggers a heap-based buffer overflow.

Vendors
graphicsmagickopensusedebian
Products
graphicsmagick, leap, opensuse, debian linux
Weakness
CWE-119, CWE-191
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.