CVE-2017-7275: Buffer Overflow

Published Mar 27, 2017

Updated

The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service (attempted large memory allocation and application crash) via a crafted file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862 and CVE-2016-8866.

Affected Software

1 affected component

ImageMagick=7.0.4-9

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ImageMagick to a version that resolves this vulnerability.
Fixed in 7.0.4.9

Event History

Mar 27, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Data Sourced

via NVD·06:59 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-7275?

CVE-2017-7275 has a severity rating that signifies a denial of service vulnerability allowing application crashes due to large memory allocation attempts.

How do I fix CVE-2017-7275?

To fix CVE-2017-7275, upgrade to a patched version of ImageMagick that addresses the vulnerability.

What type of attack does CVE-2017-7275 enable?

CVE-2017-7275 enables remote attackers to exploit a denial of service condition through crafted PCX files.

Which versions of ImageMagick are affected by CVE-2017-7275?

CVE-2017-7275 specifically affects ImageMagick version 7.0.4-9.

Is CVE-2017-7275 related to previous vulnerabilities?

Yes, CVE-2017-7275 is related to an incomplete fix for CVE-2016-8862 and CVE-2016-8866.