CVE-2015-8895

Name of the Vulnerable Software and Affected Versions ImageMagick versions 6.9.1-3 and later

Description The issue is caused by an integer overflow in the ImageMagick console graphic editor. This can be exploited by a remote attacker to cause a denial of service (application crash) by providing large input data. The vulnerability is triggered by a crafted length value that causes a buffer overflow in the coders/icon.c file.

Recommendations For ImageMagick versions 6.9.1-3 and later, consider restricting the input data size to prevent large inputs from causing the application to crash. As a temporary workaround, restrict access to the coders/icon.c file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.