An issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file could lead to a NULL pointer dereference.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file could lead to a NULL pointer     dereference. (CVE-2017-6501)

Note that Nessus relies on the presence of the package as reported by the vendor.

Please reference CVE/URL list for details

The version of ImageMagick installed on the remote Windows host is 6.x prior to 6.9.7-8 or 7.x prior to 7.0.4-8. It is, therefore, affected by multiple denial of service vulnerabilities :

  - A NULL pointer dereference flaw exists in the     ReadPSDChannel() function in coders/psd.c due to     improper handling of PSD files. An unauthenticated,     remote attacker can exploit this, by convincing a user     to open a specially crafted PSD file, to cause a denial     of service condition. (CVE-2017-6497)

  - A flaw exists in Magick++/lib/Exception.cpp due to     improper handling of nested exceptions. An     unauthenticated, remote attacker can exploit this to     cause the application to consume excessive resources,     resulting in a denial of service condition.
    (CVE-2017-6499)

  - A NULL pointer dereference flaw exists in the     ReadXCFImage() function in coders/xcf.c due to improper     handling of XCF files. An unauthenticated, remote     attacker can exploit this, by convincing a user to open     a specially crafted XCF file, to cause a denial of     service condition. (CVE-2017-6501)

ID	Name	Product	Family	Severity
221659	Linux Distros Unpatched Vulnerability : CVE-2017-6501	Nessus	Misc.	medium
135519	EulerOS 2.0 SP3 : ImageMagick (EulerOS-SA-2020-1390)	Nessus	Huawei Local Security Checks	critical
131846	EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2019-2354)	Nessus	Huawei Local Security Checks	critical
100441	FreeBSD : ImageMagick -- multiple vulnerabilities (50776801-4183-11e7-b291-b499baebfeaf)	Nessus	FreeBSD Local Security Checks	critical
97892	ImageMagick 6.x < 6.9.7-8 / 7.x < 7.0.4-8 Multiple DoS	Nessus	Windows	high

Detections

Analytics

CVE-2017-6501

medium

Tenable Plugins

medium

critical

critical

critical

high