Skip to main content

Excessive Iteration

CVE-2017-11360

Medium
6.5/10

Summary

The ReadRLEImage function in coders\rle.c in ImageMagick6 before 6.9.9-0 and ImageMagick7 before 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge number_pixels value.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • REQUIRED
  • NONE
  • NONE
  • HIGH

CWE-834 - Excessive Iteration

The software performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.

References

Advisory Timeline

  • Published