Vulnetix
Try Vulnetix Request Demo
CVE-2017-14173 PUBLISHED

In the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRange(depth)+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a very large "max_value" value.

EPSS 1.40% · 80.3th percentile

Risk Scores

EPSS Score
1.40%
80.3th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSimagemagick0, 8:6.7.7.10-5ubuntu3, 8:6.7.7.10-5ubuntu4
Ubuntu:16.04:LTSimagemagick0, 8:6.8.9.9-5ubuntu2, 8:6.8.9.9-6
Ubuntu:18.04:LTSimagemagick0, 8:6.9.7.4+dfsg-16ubuntu2, 8:6.9.7.4+dfsg-16ubuntu3

Timeline

References

Open in Interactive Console →