CVE-2017-17682

In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.

Score
CVSS 3.0 6.5 Medium
Status
Modified - cve@mitre.org
Published
2017-12-14
Last modified
2024-08-05
Weaknesses
CWE-400

Affected products

References

 
 
© AVABIS GmbH privacypolicy about