CVE-2017-7275:
The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause...
5.5
Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Root Cause Analysis
The analysis is primarily based on the vulnerability description and the stack trace provided in the linked GitHub issue #271, as attempts to fetch commit information were unsuccessful. The vulnerability description directly implicates 'ReadPCXImage' in 'coders/pcx.c'. The stack trace from the issue report confirms that 'ReadPCXImage' calls 'AcquireVirtualMemory' (and 'AcquireMagickMemory' is also in the stack), which then fails due to an attempt to allocate a very large amount of memory. Therefore, 'ReadPCXImage' is the function processing the malicious input and determining the size of the memory to be allocated, making it the core vulnerable function. 'AcquireVirtualMemory' and 'AcquireMagickMemory' are runtime indicators as they are directly involved in the crashing behavior triggered by the vulnerability in 'ReadPCXImage'.