rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-11430 Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
OmniAuth OmnitAuth-SAML 1.9.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.
Problem types: cwe_id: CWE-287
description: CWE-287: Improper Authentication
Affected products: vendor: OmniAuth
product: OmnitAuth-SAML
Credits: lang: en
value: Kelby Ludwig of Duo Security
Published: 2019-04-17T14:00:30.000Z
CVE-2017-11434 
The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a crafted DHCP options string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T18:00:00.000Z
CVE-2017-11435 
The Humax Wi-Fi Router model HG100R-* 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the management console. The bug is exploitable remotely when the router is configured to expose the management console. The router is not validating the session token while returning answers for some methods in url '/api'. An attacker can use this vulnerability to retrieve sensitive information such as private/public IP addresses, SSID names, and passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T07:00:00.000Z
CVE-2017-11436 
D-Link DIR-615 before v20.12PTb04 has a second admin account with a 0x1 BACKDOOR value, which might allow remote attackers to obtain access via a TELNET connection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T07:00:00.000Z
CVE-2017-11437 
GitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the ability to create a project to use the mirroring feature to potentially read repositories belonging to other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T19:00:00.000Z
CVE-2017-11438 
GitLab Community Edition (CE) and Enterprise Edition (EE) before 9.0.11, 9.1.8, 9.2.8 allow an authenticated user with the ability to create a group to add themselves to any project that is inside a subgroup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T19:00:00.000Z
CVE-2017-11439 
In Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T07:00:00.000Z
CVE-2017-11440 
In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi parameter and the admin/LinqScratchPad.aspx Reference parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T07:00:00.000Z
CVE-2017-11441 
The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0.45, 62.x before 62.0.27, 64.x before 64.0.33, and 66.x before 66.0.2 has XSS via a locale filename, aka SEC-297.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T07:00:00.000Z
CVE-2017-11444 
Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET array.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T07:00:00.000Z
CVE-2017-11445 
Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $_POST array.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T07:00:00.000Z
CVE-2017-11446 
The ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has an infinite loop vulnerability that can cause CPU exhaustion via a crafted PES file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T07:00:00.000Z
CVE-2017-11447 
The ReadSCREENSHOTImage function in coders/screenshot.c in ImageMagick before 7.0.6-1 has memory leaks, causing denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T07:00:00.000Z
CVE-2017-11448 
The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T07:00:00.000Z
CVE-2017-11449 
coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an image received from stdin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T07:00:00.000Z
CVE-2017-11450 
coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via JPEG data that is too short.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T07:00:00.000Z
CVE-2017-11455 
diag.cgi in Pulse Connect Secure 8.2R1 through 8.2R5, 8.1R1 through 8.1R10 and Pulse Policy Secure 5.3R1 through 5.3R5, 5.2R1 through 5.2R8, and 5.1R1 through 5.1R10 allow remote attackers to hijack the authentication of administrators for requests to start tcpdump, related to the lack of anti-CSRF tokens.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T15:00:00.000Z
CVE-2017-11456 
Geneko GWR routers allow directory traversal sequences starting with a /../ substring, as demonstrated by unauthenticated read access to the configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T07:00:00.000Z
CVE-2017-11457 
XML external entity (XXE) vulnerability in com.sap.km.cm.ice in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request, aka SAP Security Note 2387249.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T18:00:00.000Z
CVE-2017-11458 
Cross-site scripting (XSS) vulnerability in the ctcprotocol/Protocol servlet in SAP NetWeaver AS JAVA 7.3 allows remote attackers to inject arbitrary web script or HTML via the sessionID parameter, aka SAP Security Note 2406783.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T18:00:00.000Z
CVE-2017-11459 
SAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2) write to arbitrary files and consequently execute arbitrary code via an fdir command, aka SAP Security Note 2419592.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T18:00:00.000Z
CVE-2017-11460 
Cross-site scripting (XSS) vulnerability in the DataArchivingService servlet in SAP NetWeaver Portal 7.4 allows remote attackers to inject arbitrary web script or HTML via the responsecode parameter to shp/shp_result.jsp, aka SAP Security Note 2308535.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T18:00:00.000Z
CVE-2017-11461 
NetApp OnCommand Unified Manager for 7-mode (core package) versions prior to 5.2.1 are susceptible to a clickjacking or "UI redress attack" which could be used to cause a user to perform an unintended action in the user interface.
Problem types: description: Clickjacking
Affected products: vendor: NetApp
product: OnCommand Unified Manager
Published: 2017-11-09T19:00:00.000Z
CVE-2017-11462 
Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-13T16:00:00.000Z
CVE-2017-11463 
In Ivanti Service Desk (formerly LANDESK Management Suite) versions between 2016.3 and 2017.3, an Unrestricted Direct Object Reference leads to referencing/updating objects belonging to other users. In other words, a normal user can send requests to a specific URI with the target user's username in an HTTP payload in order to retrieve a key/token and use it to access/update objects belonging to other users. Such objects could be user profiles, tickets, incidents, etc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-11T06:00:00.000Z
CVE-2017-11464 
A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T21:00:00.000Z
CVE-2017-11465 
The parser_yyerror function in the UTF-8 parser in Ruby 2.4.1 allows attackers to cause a denial of service (invalid write or read) or possibly have unspecified other impact via a crafted Ruby script, related to the parser_tokadd_utf8 function in parse.y. NOTE: this might have security relevance as a bypass of a $SAFE protection mechanism.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-19T21:00:00.000Z
CVE-2017-11466 
Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remote authenticated administrators to upload .jsp files to arbitrary locations via directory traversal sequences in the fieldName parameter to servlets/ajax_file_upload. This results in arbitrary code execution by requesting the .jsp file at a /assets URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-20T00:00:00.000Z
CVE-2017-11467 
OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-20T00:00:00.000Z
CVE-2017-11468 
Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remote attackers to cause a denial of service (memory consumption) via the manifest endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-20T23:00:00.000Z
CVE-2017-11469 
get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the file_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-20T04:00:00.000Z
CVE-2017-11470 
IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-20T04:00:00.000Z
CVE-2017-11471 
IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-20T04:00:00.000Z
CVE-2017-11472 
The acpi_ns_terminate() function in drivers/acpi/acpica/nsutils.c in the Linux kernel before 4.12 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-20T04:00:00.000Z
CVE-2017-11473 
Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2 allows local users to gain privileges via a crafted ACPI table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-20T04:00:00.000Z
CVE-2017-11474 
GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer_softwareversion.class.php, exploitable via ajax/common.tabs.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-20T04:00:00.000Z
CVE-2017-11475 
GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-20T04:00:00.000Z
CVE-2017-11478 
The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed DJVU image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-20T16:00:00.000Z
CVE-2017-11479 
Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-28T19:00:00.000Z
CVE-2017-11480 
Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening for PostgreSQL traffic and a user is able to send arbitrary network traffic to the monitored port, the attacker could prevent Packetbeat from properly logging other PostgreSQL traffic.
Problem types: cwe_id: CWE-404
description: CWE-404: Improper Resource Shutdown or Release
Affected products: vendor: Elastic
product: Packetbeat
Published: 2017-12-08T18:00:00.000Z
CVE-2017-11481 
Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Elastic
product: Kibana
Published: 2017-12-08T18:00:00.000Z
CVE-2017-11482 
The Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana versions before 6.0.1 and 5.6.5 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website.
Problem types: cwe_id: CWE-601
description: CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Affected products: vendor: Elastic
product: Kibana
Published: 2017-12-08T18:00:00.000Z
CVE-2017-11494 
SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T14:00:00.000Z
CVE-2017-11495 
PHICOMM K2(PSG1218) devices V22.5.11.5 and earlier allow unauthenticated remote code execution via a request to an unspecified ASP script; alternatively, the attacker can leverage unauthenticated access to this script to trigger a reboot via an ifType=reboot action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-20T22:00:00.000Z
CVE-2017-11496 
Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via malformed ASN.1 streams in V2C and similar input files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T21:00:00.000Z
CVE-2017-11497 
Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via language packs containing filenames longer than 1024 characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T21:00:00.000Z
CVE-2017-11498 
Buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut down the remote process (a denial of service) via a language pack (ZIP file) with invalid HTML files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T21:00:00.000Z
CVE-2017-11499 
Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building with V8 snapshots enabled by default which caused the initially randomized seed to be overwritten on startup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T13:00:00.000Z
CVE-2017-11500 
A directory traversal vulnerability exists in MetInfo 5.3.17. A remote attacker can use ..\ to delete any .zip file via the filenames parameter to /admin/system/database/filedown.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-20T22:00:00.000Z
CVE-2017-11501 
NixOS 17.03 and earlier has an unintended default absence of SSL Certificate Validation for LDAP. The users.ldap NixOS module implements user authentication against LDAP servers via a PAM module. It was found that if TLS is enabled to connect to the LDAP server with users.ldap.useTLS, peer verification will be unconditionally disabled in /etc/ldap.conf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-20T23:00:00.000Z
CVE-2017-11502 
Technicolor DPC3928AD DOCSIS devices allow remote attackers to read arbitrary files via a request starting with "GET /../" on TCP port 4321.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-20T23:00:00.000Z
CVE-2017-11503 
PHPMailer 5.2.23 has XSS in the "From Email Address" and "To Email Address" fields of code_generator.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-20T23:00:00.000Z
CVE-2017-11505 
The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a malformed JNG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-21T16:00:00.000Z
CVE-2017-11506 
When linking a Nessus scanner or agent to Tenable.io or other manager, Nessus 6.x before 6.11 does not verify the manager's TLS certificate when making the initial outgoing connection. This could allow man-in-the-middle attacks.
Problem types: description: Man-in-the-Middle
Affected products: vendor: Tenable
product: Nessus
Published: 2017-08-09T12:00:00.000Z
CVE-2017-11507 
A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.2.8x prior to 1.2.8p25 and 1.4.0x prior to 1.4.0p9, allowing an unauthenticated attacker to inject arbitrary HTML or JavaScript via the output_format parameter, and the username parameter of failed HTTP basic authentication attempts, which is returned unencoded in an internal server error page.
Problem types: description: Stored and Reflected Cross Site Scripting (XSS)
Affected products: vendor: Tenable
product: Check_MK
Published: 2017-12-11T16:00:00.000Z
CVE-2017-11508 
SecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection vulnerability that could be exploited by an authenticated user with sufficient privileges to run diagnostic scans. An attacker could exploit this vulnerability by entering a crafted SQL query into the password field of a diagnostic scan within SecurityCenter. Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access.
Problem types: description: SQL Injection
Affected products: vendor: Tenable
product: SecurityCenter
Published: 2017-11-02T17:00:00.000Z
CVE-2017-11509 
An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement.
Problem types: description: Authenticated Remote Code Execution
Affected products: vendor: Firebird Foundation
product: Firebird SQL Server
Published: 2018-03-28T17:00:00.000Z
CVE-2017-11510 
An information leak exists in Wanscam's HW0021 network camera that allows an unauthenticated remote attacker to recover the administrator username and password via an ONVIF GetSnapshotUri request.
Problem types: cwe_id: CWE-200
description: CWE-200 - Information exposure
Affected products: vendor: Wanscam
product: Wanscam HW0021
Published: 2018-03-28T17:00:00.000Z
CVE-2017-11511 
The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the filepath parameter for the download-file URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory
Affected products: vendor: Zoho
product: ManageEngine ServiceDesk
Published: 2017-11-08T22:00:00.000Z
CVE-2017-11512 
The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the download-snapshot URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory
Affected products: vendor: Zoho
product: ManageEngine ServiceDesk
Published: 2017-11-08T22:00:00.000Z
CVE-2017-11516 
An XSS vulnerability exists in framework/views/errorHandler/exception.php in Yii Framework 2.0.12 affecting the exception screen when debug mode is enabled, because $exception->errorInfo is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-21T19:00:00.000Z
CVE-2017-11517 
Stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore 1.3.8.42 and 1.4.2.37 allows remote attackers to execute arbitrary code via a long URI in a GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-21T20:00:00.000Z
CVE-2017-11519 
passwd_recovery.lua on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This is fixed in C9(UN)_V2_170511.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-21T21:00:00.000Z
CVE-2017-11521 
The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service (memory consumption) by triggering many media connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-22T18:00:00.000Z
CVE-2017-11522 
The WriteOnePNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-22T21:00:00.000Z
CVE-2017-11523 
The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop) via a crafted file, because the end-of-file condition is not considered.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-22T21:00:00.000Z