ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image.
References
Link | Resource |
---|---|
http://secunia.com/advisories/49043 | Broken Link |
http://ubuntu.com/usn/usn-1435-1 | Third Party Advisory |
http://rhn.redhat.com/errata/RHSA-2012-0545.html | Third Party Advisory |
http://rhn.redhat.com/errata/RHSA-2012-0544.html | Third Party Advisory |
http://secunia.com/advisories/48247 | Broken Link |
http://www.gentoo.org/security/en/glsa/glsa-201203-09.xml | Third Party Advisory |
http://secunia.com/advisories/48259 | Broken Link |
http://www.cert.fi/en/reports/2012/vulnerability595210.html | Broken Link |
http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20286 | Issue Tracking Patch Vendor Advisory |
http://www.debian.org/security/2012/dsa-2427 | Third Party Advisory |
http://secunia.com/advisories/49068 | Broken Link |
http://secunia.com/advisories/47926 | Broken Link |
http://secunia.com/advisories/49063 | Broken Link |
http://www.osvdb.org/79003 | Broken Link |
http://www.securitytracker.com/id?1027032 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Information
Published : 2012-06-05 15:55
Updated : 2020-07-31 11:39
NVD link : CVE-2012-0247
Mitre link : CVE-2012-0247
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
redhat
- enterprise_linux_desktop
- enterprise_linux_server_aus
- enterprise_linux_workstation
- enterprise_linux_server
- storage
- enterprise_linux_server_eus
- enterprise_linux_eus
canonical
- ubuntu_linux
debian
- debian_linux
imagemagick
- imagemagick