CVE-2015-8901

MEDIUM

Imagemagick < 6.9.0-5 - Infinite Loop

Title source: rule

Description

ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted MIFF file.

References (5)

Scores

CVSS v3 6.5
EPSS 0.0045
EPSS Percentile 63.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Classification

CWE
CWE-835
Status published

Affected Products (2)

imagemagick/imagemagick < 6.9.0-5
n/a/n/a

Timeline

Published Feb 27, 2017
Tracked Since Feb 18, 2026