CVE-2017-11188

The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check.

• CWE-834

• http://www.securityfocus.com/bid/99566
• https://github.com/ImageMagick/ImageMagick/issues/509Issue Tracking, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/99566
• https://github.com/ImageMagick/ImageMagick/issues/509Issue Tracking, Patch, Third Party Advisory

Published

Jul 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-11181In Rise Ultimate Project Manager v1.8, XSS vulnerabilities w…
• CVE-2017-11182In Rise Ultimate Project Manager v1.8, XSS vulnerabilities w…
• CVE-2017-11183front/backup.php in GLPI before 9.1.5 allows remote authenti…
• CVE-2017-11184SQL injection exists in front/devicesoundcard.php in GLPI be…
• CVE-2017-11185The gmp plugin in strongSwan before 5.6.0 allows remote atta…7.5
• CVE-2017-11187phpMyFAQ before 2.9.8 does not properly mitigate brute-force…
• CVE-2017-11189unrarlib.c in unrar-free 0.0.1 might allow remote attackers …6.5
• CVE-2017-1119IBM Marketing Operations 9.1.0, 9.1.2, and 10.1 could allow …4.3
• CVE-2017-11190unrarlib.c in unrar-free 0.0.1, when _DEBUG_LOG mode is enab…
• CVE-2017-11191FreeIPA 4.x with API version 2.213 allows a remote authentic…
• CVE-2017-11193Pulse Connect Secure 8.3R1 has CSRF in diag.cgi. In the pane…
• CVE-2017-11194Pulse Connect Secure 8.3R1 has Reflected XSS in adminserverc…