Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service (application crash) via a crafted tga file.
References
Link | Resource |
---|---|
https://github.com/ImageMagick/ImageMagick/commit/4f68e9661518463fca523c9726bb5d940a2aa6d8 | Issue Tracking Patch Third Party Advisory |
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1490362 | Issue Tracking Patch Third Party Advisory |
http://www.openwall.com/lists/oss-security/2016/06/02/13 | Mailing List Patch Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2017-03-15 12:59
Updated : 2017-03-17 05:22
NVD link : CVE-2015-8894
Mitre link : CVE-2015-8894
JSON object : View
CWE
CWE-415
Double Free
Products Affected
imagemagick
- imagemagick