6.5
CVSSv3

CVE-2017-11523

Published: 22/07/2017 Updated: 03/10/2019
CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 632
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C

Vulnerability Summary

The ReadTXTImage function in coders/txt.c in ImageMagick up to and including 6.9.9-0 and 7.x up to and including 7.0.6-1 allows remote malicious users to cause a denial of service (infinite loop) via a crafted file, because the end-of-file condition is not considered.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

imagemagick imagemagick 7.0.0-0

imagemagick imagemagick 7.0.1-0

imagemagick imagemagick 7.0.1-7

imagemagick imagemagick 7.0.1-8

imagemagick imagemagick 7.0.1-3

imagemagick imagemagick 7.0.1-4

imagemagick imagemagick 7.0.2-0

imagemagick imagemagick 7.0.2-1

imagemagick imagemagick 7.0.2-2

imagemagick imagemagick 7.0.2-9

imagemagick imagemagick 7.0.2-10

imagemagick imagemagick 7.0.3-6

imagemagick imagemagick 7.0.3-7

imagemagick imagemagick 7.0.4-4

imagemagick imagemagick 7.0.4-5

imagemagick imagemagick 7.0.5-1

imagemagick imagemagick 7.0.5-4

imagemagick imagemagick 7.0.1-1

imagemagick imagemagick 7.0.1-2

imagemagick imagemagick 7.0.1-9

imagemagick imagemagick 7.0.1-10

imagemagick imagemagick 7.0.2-7

imagemagick imagemagick 7.0.2-8

imagemagick imagemagick 7.0.3-4

imagemagick imagemagick 7.0.3-5

imagemagick imagemagick 7.0.4-1

imagemagick imagemagick 7.0.4-2

imagemagick imagemagick 7.0.4-3

imagemagick imagemagick 7.0.4-10

imagemagick imagemagick 7.0.5-0

imagemagick imagemagick 7.0.6-1

imagemagick imagemagick

imagemagick imagemagick 7.0.2-5

imagemagick imagemagick 7.0.2-6

imagemagick imagemagick 7.0.3-2

imagemagick imagemagick 7.0.3-3

imagemagick imagemagick 7.0.3-10

imagemagick imagemagick 7.0.4-0

imagemagick imagemagick 7.0.4-8

imagemagick imagemagick 7.0.4-9

imagemagick imagemagick 7.0.5-7

imagemagick imagemagick 7.0.5-8

imagemagick imagemagick 7.0.1-5

imagemagick imagemagick 7.0.1-6

imagemagick imagemagick 7.0.2-3

imagemagick imagemagick 7.0.2-4

imagemagick imagemagick 7.0.3-0

imagemagick imagemagick 7.0.3-1

imagemagick imagemagick 7.0.3-8

imagemagick imagemagick 7.0.3-9

imagemagick imagemagick 7.0.4-6

imagemagick imagemagick 7.0.4-7

imagemagick imagemagick 7.0.5-5

imagemagick imagemagick 7.0.5-6

Vendor Advisories

The ReadTXTImage function in coders/txtc in ImageMagick through 699-0 and 7x through 706-1 allows remote attackers to cause a denial of service (infinite loop) via a crafted file, because the end-of-file condition is not considered ...
Debian Bug report logs - #869210 imagemagick: CVE-2017-11523: endless loop in ReadTXTImage Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Fri, 21 Jul 2017 15:39:02 U ...
Debian Bug report logs - #869830 imagemagick: CVE-2017-13145 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Wed, 26 Jul 2017 20:51:02 UTC Severity: important Tags: ...
Debian Bug report logs - #870019 imagemagick: CVE-2017-13658 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Fri, 28 Jul 2017 22:33:02 UTC Severity: important Tags: ...
Debian Bug report logs - #869827 CVE-2017-11535: heap based overflow in psc Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Wed, 26 Jul 2017 20:30:01 UTC Severity: ...
Debian Bug report logs - #869712 CVE-2017-11537: palm fpe Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 25 Jul 2017 20:36:01 UTC Severity: important Tags: sec ...
Debian Bug report logs - #869831 CVE-2017-11536 memory leak in jp2 coder Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Wed, 26 Jul 2017 21:03:02 UTC Severity: impo ...
Debian Bug report logs - #870020 imagemagick: CVE-2017-12670 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Fri, 28 Jul 2017 22:33:07 UTC Severity: important Tags: ...
Debian Bug report logs - #870022 imagemagick: CVE-2017-12675 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Fri, 28 Jul 2017 22:36:07 UTC Severity: important Tags: ...
Debian Bug report logs - #869715 imagemagick: CVE-2017-12431: use after free in ReadWMFImage Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 25 Jul 2017 20:45:09 ...
Debian Bug report logs - #869721 imagemagick: CVE-2017-12664 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 25 Jul 2017 21:33:01 UTC Severity: important Tags: ...
Debian Bug report logs - #870017 imagemagick: CVE-2017-12564: memory leak in mat file handler Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Fri, 28 Jul 2017 22:03:0 ...
Debian Bug report logs - #870013 imagemagick: CVE-2017-13146 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Fri, 28 Jul 2017 21:39:02 UTC Severity: important Tags: ...
Debian Bug report logs - #870014 imagemagick: CVE-2017-12434: assertion failed in DestroyImageInfo Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Fri, 28 Jul 2017 22 ...
Debian Bug report logs - #870023 imagemagick: CVE-2017-11724: memory leak in mat coder Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Fri, 28 Jul 2017 22:36:12 UTC ...
Debian Bug report logs - #869711 CVE-2017-11534: wmf memory leak Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 25 Jul 2017 20:33:04 UTC Severity: important Ta ...
Debian Bug report logs - #870012 imagemagick: CVE-2017-13143 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Fri, 28 Jul 2017 21:36:01 UTC Severity: important Tags: ...
Debian Bug report logs - #869726 CVE-2017-11532: memory leak in coders/mpcc Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 25 Jul 2017 21:57:02 UTC Severity: ...
Debian Bug report logs - #870021 imagemagick: CVE-2017-12672 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Fri, 28 Jul 2017 22:36:01 UTC Severity: important Tags: ...
Debian Bug report logs - #869725 CVE-2017-11531: Memory Leak in coders/histogramc Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 25 Jul 2017 21:51:02 UTC Sev ...
Debian Bug report logs - #869727 imagemagick: CVE-2017-12430: Memory exhaustion in mpc coder Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 25 Jul 2017 22:06:01 ...
Debian Bug report logs - #869834 CVE-2017-11533: heap buffer overflow in uil coder Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Wed, 26 Jul 2017 21:15:05 UTC Seve ...
Debian Bug report logs - #870015 imagemagick: CVE-2017-12667 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Fri, 28 Jul 2017 22:00:06 UTC Severity: important Tags: ...
Debian Bug report logs - #869796 imagemagick: CVE-2017-12642 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Wed, 26 Jul 2017 14:15:02 UTC Severity: important Tags: ...
Debian Bug report logs - #868950 imagemagick: CVE-2017-11446 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 19 Jul 2017 19:09:01 UTC Severity: important Tags: fixed-u ...
Debian Bug report logs - #870016 Memory-Leak in ReadMATImage() Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Fri, 28 Jul 2017 22:00:11 UTC Severity: important Tags ...
Debian Bug report logs - #869722 Imagemagick: memory leak in quantize Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 25 Jul 2017 21:33:07 UTC Severity: importa ...
Debian Bug report logs - #867778 imagemagick: CVE-2017-9500: assertion failed in ResetImageProfileIterator Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 9 Jul 2017 1 ...
Debian Bug report logs - #869728 imagemagick: CVE-2017-13144 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Bastien ROUCARIES <roucariesbastien@gmailcom> Date: Tue, 25 Jul 2017 22:09:01 UTC Severity: serious Tags: se ...