Base Score

MEDIUM5.5

CVE-2015-8900

The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service (infinite loop) via a crafted HDR file.

VectorLOCAL

Published Bycve@mitre.org

Published DateFeb 27, 2017, 22:59

Weakness Type (CWE):CWE-835

CVSS Metrics

Base Score

5.5

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

REQUIRED

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

HIGH

References

http://trac.imagemagick.org/changeset/17845
http://trac.imagemagick.org/changeset/17846
http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26929
http://www.openwall.com/lists/oss-security/2015/02/26/13
http://www.openwall.com/lists/oss-security/2016/06/06/2
https://bugzilla.redhat.com/show_bug.cgi?id=1195260
https://github.com/ImageMagick/ImageMagick/commit/97aa7d7cfd2027f6ba7ce42caf8b798541b9cdc6

Base Score

MEDIUM5.5

Weakness Type (CWE):CWE-835

CVSS Metrics

Base Score

5.5

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

REQUIRED

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

NONE

Availability (A)

HIGH