CVE-2017-13144

Published: Aug 23, 2017Modified: May 13, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

In ImageMagick before 6.9.7-10, there is a crash (rather than a "width or height exceeds limit" error report) if the image dimensions are too large, as demonstrated by use of the mpc coder.

Affected (1)

Products: Imagemagick: Imagemagick

Imagemagick

1 product

Imagemagick

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Imagemagick Imagemagick	Up to 6.9.7-9

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869728

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://security.gentoo.org/glsa/201711-07

Source: cve@mitre.org

https://usn.ubuntu.com/3681-1/

Source: cve@mitre.org

https://www.debian.org/security/2017/dsa-4019

Source: cve@mitre.org

https://www.debian.org/security/2017/dsa-4040

Source: cve@mitre.org

https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=31438

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869728