| Package | Affected versions | Patched versions |
|---|---|---|
| imagemagick | = 7.0.0-0= 7.0.1-0= 7.0.1-1= 7.0.1-10= 7.0.1-2= 7.0.1-3= 7.0.1-4= 7.0.1-5= 7.0.1-6= 7.0.1-7= 7.0.1-8= 7.0.1-9= 7.0.2-0= 7.0.2-1= 7.0.2-10= 7.0.2-2= 7.0.2-3= 7.0.2-4= 7.0.2-5= 7.0.2-6= 7.0.2-7= 7.0.2-8= 7.0.2-9= 7.0.3-0= 7.0.3-1= 7.0.3-10= 7.0.3-2= 7.0.3-3= 7.0.3-4= 7.0.3-5= 7.0.3-6= 7.0.3-7= 7.0.3-8= 7.0.3-9= 7.0.4-0= 7.0.4-1= 7.0.4-10= 7.0.4-2= 7.0.4-3= 7.0.4-4= 7.0.4-5= 7.0.4-6= 7.0.4-7= 7.0.4-8= 7.0.4-9= 7.0.5-0= 7.0.5-1= 7.0.5-10= 7.0.5-2= 7.0.5-3= 7.0.5-4= 7.0.5-5= 7.0.5-6= 7.0.5-7= 7.0.5-8= 7.0.5-9= 7.0.6-0= 7.0.6-1≤ 6.9.9-0 |
The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed DJVU image.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free