Excessive Iteration
CVE-2017-11360
Summary
The ReadRLEImage function in coders\rle.c in ImageMagick6 before 6.9.9-0 and ImageMagick7 before 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge number_pixels value.
- LOW
- NETWORK
- NONE
- UNCHANGED
- REQUIRED
- NONE
- NONE
- HIGH
CWE-834 - Excessive Iteration
The software performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.
References
Advisory Timeline
- Published