CVE-2017-11166

CVE-2017-11166 describes a memory leak vulnerability in the ReadXWDImage function of ImageMagick versions 7.0.5-6. A remote attacker could exploit this by crafting an XWD file with a malicious length field, leading to memory exhaustion and a denial-of-service condition. Rated 6.5 Medium, this vulnerability requires user interaction (UI:R) to process the malicious file, but has low attack complexity (AC:L) and no authentication required (PR:N). There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.