The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop) via a crafted file, because the end-of-file condition is not considered.
Weakness
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Imagemagick | Imagemagick | * | 6.9.9-0 (including) |
| Imagemagick | Imagemagick | 7.0.0-0 (including) | 7.0.0-0 (including) |
| Imagemagick | Imagemagick | 7.0.1-0 (including) | 7.0.1-0 (including) |
| Imagemagick | Imagemagick | 7.0.1-1 (including) | 7.0.1-1 (including) |
| Imagemagick | Imagemagick | 7.0.1-2 (including) | 7.0.1-2 (including) |
| Imagemagick | Imagemagick | 7.0.1-3 (including) | 7.0.1-3 (including) |
| Imagemagick | Imagemagick | 7.0.1-4 (including) | 7.0.1-4 (including) |
| Imagemagick | Imagemagick | 7.0.1-5 (including) | 7.0.1-5 (including) |
| Imagemagick | Imagemagick | 7.0.1-6 (including) | 7.0.1-6 (including) |
| Imagemagick | Imagemagick | 7.0.1-7 (including) | 7.0.1-7 (including) |
| Imagemagick | Imagemagick | 7.0.1-8 (including) | 7.0.1-8 (including) |
| Imagemagick | Imagemagick | 7.0.1-9 (including) | 7.0.1-9 (including) |
| Imagemagick | Imagemagick | 7.0.1-10 (including) | 7.0.1-10 (including) |
| Imagemagick | Imagemagick | 7.0.2-0 (including) | 7.0.2-0 (including) |
| Imagemagick | Imagemagick | 7.0.2-1 (including) | 7.0.2-1 (including) |
| Imagemagick | Imagemagick | 7.0.2-2 (including) | 7.0.2-2 (including) |
| Imagemagick | Imagemagick | 7.0.2-3 (including) | 7.0.2-3 (including) |
| Imagemagick | Imagemagick | 7.0.2-4 (including) | 7.0.2-4 (including) |
| Imagemagick | Imagemagick | 7.0.2-5 (including) | 7.0.2-5 (including) |
| Imagemagick | Imagemagick | 7.0.2-6 (including) | 7.0.2-6 (including) |
| Imagemagick | Imagemagick | 7.0.2-7 (including) | 7.0.2-7 (including) |
| Imagemagick | Imagemagick | 7.0.2-8 (including) | 7.0.2-8 (including) |
| Imagemagick | Imagemagick | 7.0.2-9 (including) | 7.0.2-9 (including) |
| Imagemagick | Imagemagick | 7.0.2-10 (including) | 7.0.2-10 (including) |
| Imagemagick | Imagemagick | 7.0.3-0 (including) | 7.0.3-0 (including) |
| Imagemagick | Imagemagick | 7.0.3-1 (including) | 7.0.3-1 (including) |
| Imagemagick | Imagemagick | 7.0.3-2 (including) | 7.0.3-2 (including) |
| Imagemagick | Imagemagick | 7.0.3-3 (including) | 7.0.3-3 (including) |
| Imagemagick | Imagemagick | 7.0.3-4 (including) | 7.0.3-4 (including) |
| Imagemagick | Imagemagick | 7.0.3-5 (including) | 7.0.3-5 (including) |
| Imagemagick | Imagemagick | 7.0.3-6 (including) | 7.0.3-6 (including) |
| Imagemagick | Imagemagick | 7.0.3-7 (including) | 7.0.3-7 (including) |
| Imagemagick | Imagemagick | 7.0.3-8 (including) | 7.0.3-8 (including) |
| Imagemagick | Imagemagick | 7.0.3-9 (including) | 7.0.3-9 (including) |
| Imagemagick | Imagemagick | 7.0.3-10 (including) | 7.0.3-10 (including) |
| Imagemagick | Imagemagick | 7.0.4-0 (including) | 7.0.4-0 (including) |
| Imagemagick | Imagemagick | 7.0.4-1 (including) | 7.0.4-1 (including) |
| Imagemagick | Imagemagick | 7.0.4-2 (including) | 7.0.4-2 (including) |
| Imagemagick | Imagemagick | 7.0.4-3 (including) | 7.0.4-3 (including) |
| Imagemagick | Imagemagick | 7.0.4-4 (including) | 7.0.4-4 (including) |
| Imagemagick | Imagemagick | 7.0.4-5 (including) | 7.0.4-5 (including) |
| Imagemagick | Imagemagick | 7.0.4-6 (including) | 7.0.4-6 (including) |
| Imagemagick | Imagemagick | 7.0.4-7 (including) | 7.0.4-7 (including) |
| Imagemagick | Imagemagick | 7.0.4-8 (including) | 7.0.4-8 (including) |
| Imagemagick | Imagemagick | 7.0.4-9 (including) | 7.0.4-9 (including) |
| Imagemagick | Imagemagick | 7.0.4-10 (including) | 7.0.4-10 (including) |
| Imagemagick | Imagemagick | 7.0.5-0 (including) | 7.0.5-0 (including) |
| Imagemagick | Imagemagick | 7.0.5-1 (including) | 7.0.5-1 (including) |
| Imagemagick | Imagemagick | 7.0.5-4 (including) | 7.0.5-4 (including) |
| Imagemagick | Imagemagick | 7.0.5-5 (including) | 7.0.5-5 (including) |
| Imagemagick | Imagemagick | 7.0.5-6 (including) | 7.0.5-6 (including) |
| Imagemagick | Imagemagick | 7.0.5-7 (including) | 7.0.5-7 (including) |
| Imagemagick | Imagemagick | 7.0.5-8 (including) | 7.0.5-8 (including) |
| Imagemagick | Imagemagick | 7.0.6-1 (including) | 7.0.6-1 (including) |
| Imagemagick | Ubuntu | esm-infra-legacy/trusty | * |
| Imagemagick | Ubuntu | esm-infra/xenial | * |
| Imagemagick | Ubuntu | trusty | * |
| Imagemagick | Ubuntu | trusty/esm | * |
| Imagemagick | Ubuntu | upstream | * |
| Imagemagick | Ubuntu | xenial | * |
| Imagemagick | Ubuntu | zesty | * |
References
- https://bugs.debian.org/869210
- https://github.com/ImageMagick/ImageMagick/commit/83e0f8ffd7eeb7661b0ff83257da23d24ca7f078
- https://github.com/ImageMagick/ImageMagick/commit/a8f9c2aabed37cd6a728532d1aed13ae0f3dfd78
- https://github.com/ImageMagick/ImageMagick/issues/591
- https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
- https://www.debian.org/security/2017/dsa-4019
- https://bugs.debian.org/869210
- https://github.com/ImageMagick/ImageMagick/commit/83e0f8ffd7eeb7661b0ff83257da23d24ca7f078
- https://github.com/ImageMagick/ImageMagick/commit/a8f9c2aabed37cd6a728532d1aed13ae0f3dfd78
- https://github.com/ImageMagick/ImageMagick/issues/591
- https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
- https://www.debian.org/security/2017/dsa-4019