CVE-2017-13140 | BDVDB-2026-89476 Detail

Description#

In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service (application hang in LockSemaphoreInfo) via a PNG file with a width equal to MAGICK_WIDTH_LIMIT.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/ImageMagick/ImageMagick/issues/596
https://security.gentoo.org/glsa/201711-07
https://www.debian.org/security/2017/dsa-4019
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870111

Exploit#

No public exploit known

History#

Version 12017-08-23Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.