CVE-2012-0247

Description (CNA)

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://www.gentoo.org/security/en/glsa/glsa-201203-09.xml
• http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20286
• http://secunia.com/advisories/49068
• http://www.cert.fi/en/reports/2012/vulnerability595210.html
• http://secunia.com/advisories/48259
• http://secunia.com/advisories/49043
• http://secunia.com/advisories/49063
• http://www.debian.org/security/2012/dsa-2427
• http://rhn.redhat.com/errata/RHSA-2012-0544.html
• http://secunia.com/advisories/47926
• http://ubuntu.com/usn/usn-1435-1
• http://secunia.com/advisories/48247
• http://www.osvdb.org/79003
• http://www.securitytracker.com/id?1027032
• http://rhn.redhat.com/errata/RHSA-2012-0545.html

ADP enrichment