Test ID:	1.3.6.1.4.1.25623.1.0.810558
Category:	Denial of Service
Title:	ImageMagick 'IsPixelGray' Function Denial of Service Vulnerability - Mac OS X
Summary:	ImageMagick is prone to a denial of service (DoS) vulnerability.
Description:	Summary: ImageMagick is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is due to a heap-based buffer overflow error in the 'IsPixelGray' function in MagickCore/pixel-accessor.h script. Vulnerability Impact: Successful exploitation will allow remote attackers to cause a denial of service (out-of-bounds heap read). Affected Software/OS: ImageMagick version 7.0.3-8 on Mac OS X. Solution: Update to version 7.0.3-9 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9773 [oss-security] 20161201 imagemagick: heap-based buffer overflow in IsPixelGray (pixel-accessor.h) (Incomplete fix for CVE-2016-9556) http://www.openwall.com/lists/oss-security/2016/12/01/4 [oss-security] 20161202 Re: Re: imagemagick: heap-based buffer overflow in IsPixelGray (pixel-accessor.h) (Incomplete fix for CVE-2016-9556) http://www.openwall.com/lists/oss-security/2016/12/02/12 [oss-security] 20161202 Re: imagemagick: heap-based buffer overflow in IsPixelGray (pixel-accessor.h) (Incomplete fix for CVE-2016-9556) http://www.openwall.com/lists/oss-security/2016/12/02/11 https://blogs.gentoo.org/ago/2016/12/01/imagemagick-heap-based-buffer-overflow-in-ispixelgray-pixel-accessor-h-incomplete-fix-for-cve-2016-9556/
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.