Excessive Iteration Denial of Service Vulnerability in ImageMagick 7.0.7-26 Q16

CVE-2018-9133 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:N/A:P

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes) with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file.

Learn more about our Web Application Penetration Testing UK.