Base Score

MEDIUM6.2

CVE-2014-8716

The JPEG decoder in ImageMagick before 6.8.9-9 allows local users to cause a denial of service (out-of-bounds memory access and crash).

VectorLOCAL

Published Bycve@mitre.org

Published DateApr 11, 2017, 19:59

Weakness Type (CWE):CWE-125

CVSS Metrics

Base Score

6.2

Vector String

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Severity

MEDIUM

Version

3.0

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

HIGH

References

http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26456
http://www.securityfocus.com/bid/70992
https://bugzilla.redhat.com/show_bug.cgi?id=1164248

Base Score

MEDIUM6.2

Weakness Type (CWE):CWE-125

CVSS Metrics

Base Score

6.2

Vector String

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Severity

MEDIUM

Version

3.0

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

HIGH