In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service (ReadOneMNGImage large loop) via a crafted mng image file.
The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Imagemagick | Imagemagick | 7.0.7-16 (including) | 7.0.7-16 (including) |
| Imagemagick | Ubuntu | artful | * |
| Imagemagick | Ubuntu | bionic | * |
| Imagemagick | Ubuntu | devel | * |
| Imagemagick | Ubuntu | trusty | * |
| Imagemagick | Ubuntu | upstream | * |
| Imagemagick | Ubuntu | xenial | * |
| Imagemagick | Ubuntu | zesty | * |