ImageMagick < 7.1.2 DoS

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(242330);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/03/30");

  script_cve_id("CVE-2025-53015");
  script_xref(name:"IAVB", value:"2025-B-0117-S");

  script_name(english:"ImageMagick < 7.1.2 DoS");

  script_set_attribute(attribute:"synopsis", value:
"The remote Windows host has an application installed that is affected by multiple vulnerabilities");
  script_set_attribute(attribute:"description", value:
"The remote Windows host has a version of ImageMagick installed that prior to 7.1.2. It is, therefore, affected by a 
Denial of Service vulnerability. This occurs as the result of a specific XMP file conversion command that causes the 
program to generate infinite lines. A remote unauthorized attacker could use this vulnerability to prevent access to 
the target.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  # https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vmhh-8rxq-fp9g
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?a83aacc3");
  script_set_attribute(attribute:"solution", value:
"Upgrade to ImageMagick version 7.1.2-0 or later.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-53015");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/07/15");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/07/15");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/07/18");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:imagemagick:imagemagick");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("imagemagick_installed.nasl");
  script_require_keys("installed_sw/ImageMagick");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'checks': [
    {
      'check_algorithm': 'default',
      'product': {'name': 'ImageMagick', 'type': 'app'},
      'constraints': [
        { 'fixed_version' : '7.1.2', 'fixed_display' : '7.1.2-0'}
      ]
    }
  ]
};

var result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_HOLE);
vdf::handle_check_and_report_errors(vdf_result:result);