The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service (attempted large memory allocation and application crash) via a crafted file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862 and CVE-2016-8866.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial
    of service (attempted large memory allocation and application crash) via a crafted file. NOTE: this
    vulnerability exists because of an incomplete fix for CVE-2016-8862 and CVE-2016-8866. (CVE-2017-7275)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial     of service (attempted large memory allocation and application crash) via a crafted file. NOTE: this     vulnerability exists because of an incomplete fix for CVE-2016-8862 and CVE-2016-8866. (CVE-2017-7275)

Note that Nessus relies on the presence of the package as reported by the vendor.

Please reference CVE/URL list for details

ID	Name	Product	Family	Type	Severity
457186	Echo: imagemagick: security update to 8:7.1.1.43+dfsg1-1+deb13u2	Tenable Cloud Security	Echo Local Security Checks	Local	medium
457186	Echo: imagemagick: security update to 8:7.1.1.43+dfsg1-1+deb13u2	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
221384	Linux Distros Unpatched Vulnerability : CVE-2017-7275	Nessus	Misc.	Local	medium
100441	FreeBSD : ImageMagick -- multiple vulnerabilities (50776801-4183-11e7-b291-b499baebfeaf)	Nessus	FreeBSD Local Security Checks	Local	critical

Detections

Analytics

CVE-2017-7275

medium

Tenable Plugins

medium

medium

medium

critical