{"id":"CVE-2017-7275","published":"2017-03-27T18:00:00Z","modified":"2024-08-05T15:56:36Z","title":"The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service…","vendor":null,"product":null,"tier":"tail","description":{"text":"The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service (attempted large memory allocation and application crash) via a crafted file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862 and CVE-2016-8866.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.0143,"percentile":0.72915,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/ImageMagick/ImageMagick/issues/271","tags":["x_refsource_MISC"]},{"url":"https://blogs.gentoo.org/ago/2017/03/27/imagemagick-memory-allocation-failure-in-acquiremagickmemory-memory-c-incomplete-fix-for-cve-2016-8862-and-cve-2016-8866/","tags":["x_refsource_MISC"]},{"url":"http://www.securityfocus.com/bid/97166","tags":["vdb-entry","x_refsource_BID"]}],"priority":{"score":14.6,"factors":[{"name":"EPSS percentile","points":14.58}]},"euvd":{"id":"EUVD-2017-16304","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2016-8862-family-cve-2016-8862","parents":[{"from":"CVE-2016-8862","to":"CVE-2017-7275","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862 and CVE-2016-8866.","from":"CVE.org","in":"CVE-2017-7275"}]},{"from":"CVE-2016-8866","to":"CVE-2017-7275","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862 and CVE-2016-8866.","from":"CVE.org","in":"CVE-2017-7275"}]}]}}