CVE-2017-14341

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in coders/wpg.c, causing CPU exhaustion via a crafted wpg image file.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/ImageMagick/ImageMagick/commit/7d63315a64267c565d1f34b9cb523a14616fed24Patch, Vendor Advisory
https://github.com/ImageMagick/ImageMagick/issues/654Exploit, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/05/msg00015.htmlThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/09/msg00007.htmlThird Party Advisory
https://usn.ubuntu.com/3681-1/Third Party Advisory
https://github.com/ImageMagick/ImageMagick/commit/7d63315a64267c565d1f34b9cb523a14616fed24Patch, Vendor Advisory
https://github.com/ImageMagick/ImageMagick/issues/654Exploit, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/05/msg00015.htmlThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/09/msg00007.htmlThird Party Advisory
https://usn.ubuntu.com/3681-1/Third Party Advisory

Timeline

Published: Sep 12, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-143426.5ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file.CVE-2017-143436.5ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file.CVE-2017-143447.8This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ab CVE-2017-143459.8SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php.CVE-2017-143469.8upload.php in tianchoy/blog through 2017-09-12 allows unrestricted file upload and PHP code execution by using the image/jpeg, image/pjpeg, CVE-2017-143476.1NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action.CVE-2017-143488.8LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file.CVE-2017-143499.8An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interface CVE-2017-143509.8A potential security vulnerability has been identified in HPE Application Performance Management (BSM) Platform versions 9.26, 9.30, 9.40. T CVE-2017-143519.8A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. CVE-2017-143526.1A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. CVE-2017-143538.8A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 1