The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a malformed JNG file.
Weakness
The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Imagemagick | Imagemagick | * | 6.9.9-0 (including) |
| Imagemagick | Imagemagick | 7.0.0-0 (including) | 7.0.0-0 (including) |
| Imagemagick | Imagemagick | 7.0.1-0 (including) | 7.0.1-0 (including) |
| Imagemagick | Imagemagick | 7.0.1-1 (including) | 7.0.1-1 (including) |
| Imagemagick | Imagemagick | 7.0.1-2 (including) | 7.0.1-2 (including) |
| Imagemagick | Imagemagick | 7.0.1-3 (including) | 7.0.1-3 (including) |
| Imagemagick | Imagemagick | 7.0.1-4 (including) | 7.0.1-4 (including) |
| Imagemagick | Imagemagick | 7.0.1-5 (including) | 7.0.1-5 (including) |
| Imagemagick | Imagemagick | 7.0.1-6 (including) | 7.0.1-6 (including) |
| Imagemagick | Imagemagick | 7.0.1-7 (including) | 7.0.1-7 (including) |
| Imagemagick | Imagemagick | 7.0.1-8 (including) | 7.0.1-8 (including) |
| Imagemagick | Imagemagick | 7.0.1-9 (including) | 7.0.1-9 (including) |
| Imagemagick | Imagemagick | 7.0.1-10 (including) | 7.0.1-10 (including) |
| Imagemagick | Imagemagick | 7.0.2-0 (including) | 7.0.2-0 (including) |
| Imagemagick | Imagemagick | 7.0.2-1 (including) | 7.0.2-1 (including) |
| Imagemagick | Imagemagick | 7.0.2-2 (including) | 7.0.2-2 (including) |
| Imagemagick | Imagemagick | 7.0.2-3 (including) | 7.0.2-3 (including) |
| Imagemagick | Imagemagick | 7.0.2-4 (including) | 7.0.2-4 (including) |
| Imagemagick | Imagemagick | 7.0.2-5 (including) | 7.0.2-5 (including) |
| Imagemagick | Imagemagick | 7.0.2-6 (including) | 7.0.2-6 (including) |
| Imagemagick | Imagemagick | 7.0.2-7 (including) | 7.0.2-7 (including) |
| Imagemagick | Imagemagick | 7.0.2-8 (including) | 7.0.2-8 (including) |
| Imagemagick | Imagemagick | 7.0.2-9 (including) | 7.0.2-9 (including) |
| Imagemagick | Imagemagick | 7.0.2-10 (including) | 7.0.2-10 (including) |
| Imagemagick | Imagemagick | 7.0.3-0 (including) | 7.0.3-0 (including) |
| Imagemagick | Imagemagick | 7.0.3-1 (including) | 7.0.3-1 (including) |
| Imagemagick | Imagemagick | 7.0.3-2 (including) | 7.0.3-2 (including) |
| Imagemagick | Imagemagick | 7.0.3-3 (including) | 7.0.3-3 (including) |
| Imagemagick | Imagemagick | 7.0.3-4 (including) | 7.0.3-4 (including) |
| Imagemagick | Imagemagick | 7.0.3-5 (including) | 7.0.3-5 (including) |
| Imagemagick | Imagemagick | 7.0.3-6 (including) | 7.0.3-6 (including) |
| Imagemagick | Imagemagick | 7.0.3-7 (including) | 7.0.3-7 (including) |
| Imagemagick | Imagemagick | 7.0.3-8 (including) | 7.0.3-8 (including) |
| Imagemagick | Imagemagick | 7.0.3-9 (including) | 7.0.3-9 (including) |
| Imagemagick | Imagemagick | 7.0.3-10 (including) | 7.0.3-10 (including) |
| Imagemagick | Imagemagick | 7.0.4-0 (including) | 7.0.4-0 (including) |
| Imagemagick | Imagemagick | 7.0.4-1 (including) | 7.0.4-1 (including) |
| Imagemagick | Imagemagick | 7.0.4-2 (including) | 7.0.4-2 (including) |
| Imagemagick | Imagemagick | 7.0.4-3 (including) | 7.0.4-3 (including) |
| Imagemagick | Imagemagick | 7.0.4-4 (including) | 7.0.4-4 (including) |
| Imagemagick | Imagemagick | 7.0.4-5 (including) | 7.0.4-5 (including) |
| Imagemagick | Imagemagick | 7.0.4-6 (including) | 7.0.4-6 (including) |
| Imagemagick | Imagemagick | 7.0.4-7 (including) | 7.0.4-7 (including) |
| Imagemagick | Imagemagick | 7.0.4-8 (including) | 7.0.4-8 (including) |
| Imagemagick | Imagemagick | 7.0.4-9 (including) | 7.0.4-9 (including) |
| Imagemagick | Imagemagick | 7.0.4-10 (including) | 7.0.4-10 (including) |
| Imagemagick | Imagemagick | 7.0.5-0 (including) | 7.0.5-0 (including) |
| Imagemagick | Imagemagick | 7.0.5-1 (including) | 7.0.5-1 (including) |
| Imagemagick | Imagemagick | 7.0.5-2 (including) | 7.0.5-2 (including) |
| Imagemagick | Imagemagick | 7.0.5-3 (including) | 7.0.5-3 (including) |
| Imagemagick | Imagemagick | 7.0.5-4 (including) | 7.0.5-4 (including) |
| Imagemagick | Imagemagick | 7.0.5-5 (including) | 7.0.5-5 (including) |
| Imagemagick | Imagemagick | 7.0.5-6 (including) | 7.0.5-6 (including) |
| Imagemagick | Imagemagick | 7.0.5-7 (including) | 7.0.5-7 (including) |
| Imagemagick | Imagemagick | 7.0.5-8 (including) | 7.0.5-8 (including) |
| Imagemagick | Imagemagick | 7.0.5-9 (including) | 7.0.5-9 (including) |
| Imagemagick | Imagemagick | 7.0.5-10 (including) | 7.0.5-10 (including) |
| Imagemagick | Imagemagick | 7.0.6-0 (including) | 7.0.6-0 (including) |
| Imagemagick | Imagemagick | 7.0.6-1 (including) | 7.0.6-1 (including) |
| Imagemagick | Ubuntu | esm-infra-legacy/trusty | * |
| Imagemagick | Ubuntu | esm-infra/xenial | * |
| Imagemagick | Ubuntu | trusty | * |
| Imagemagick | Ubuntu | trusty/esm | * |
| Imagemagick | Ubuntu | upstream | * |
| Imagemagick | Ubuntu | xenial | * |
| Imagemagick | Ubuntu | yakkety | * |
| Imagemagick | Ubuntu | zesty | * |