The version of ImageMagick installed on the remote Windows host is 6.x prior to 6.9.7-8 or 7.x prior to 7.0.4-8. It is, therefore, affected by multiple denial of service vulnerabilities :

  - A NULL pointer dereference flaw exists in the     ReadPSDChannel() function in coders/psd.c due to     improper handling of PSD files. An unauthenticated,     remote attacker can exploit this, by convincing a user     to open a specially crafted PSD file, to cause a denial     of service condition. (CVE-2017-6497)

  - A flaw exists in Magick++/lib/Exception.cpp due to     improper handling of nested exceptions. An     unauthenticated, remote attacker can exploit this to     cause the application to consume excessive resources,     resulting in a denial of service condition.
    (CVE-2017-6499)

  - A NULL pointer dereference flaw exists in the     ReadXCFImage() function in coders/xcf.c due to improper     handling of XCF files. An unauthenticated, remote     attacker can exploit this, by convincing a user to open     a specially crafted XCF file, to cause a denial of     service condition. (CVE-2017-6501)

Please reference CVE/URL list for details

ID	Name	Product	Family	Published	Updated	Severity
97892	ImageMagick 6.x < 6.9.7-8 / 7.x < 7.0.4-8 Multiple DoS	Nessus	Windows	3/22/2017	7/7/2023	high
131846	EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2019-2354)	Nessus	Huawei Local Security Checks	12/10/2019	2/9/2021	critical
100441	FreeBSD : ImageMagick -- multiple vulnerabilities (50776801-4183-11e7-b291-b499baebfeaf)	Nessus	FreeBSD Local Security Checks	5/26/2017	1/4/2021	critical
135519	EulerOS 2.0 SP3 : ImageMagick (EulerOS-SA-2020-1390)	Nessus	Huawei Local Security Checks	4/15/2020	2/9/2021	critical

Detections

Analytics

Plugins Search

high

critical

critical

critical