Description
ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.gentoo.org/security/en/glsa/glsa-201203-09.xml ↗
- http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20286 ↗
- http://secunia.com/advisories/49068 ↗
- http://www.cert.fi/en/reports/2012/vulnerability595210.html ↗
- http://secunia.com/advisories/48259 ↗
- http://secunia.com/advisories/49043 ↗
- http://secunia.com/advisories/49063 ↗
- http://www.debian.org/security/2012/dsa-2427 ↗
- http://rhn.redhat.com/errata/RHSA-2012-0544.html ↗
- http://secunia.com/advisories/47926 ↗
- http://ubuntu.com/usn/usn-1435-1 ↗
- http://secunia.com/advisories/48247 ↗
- http://www.osvdb.org/79003 ↗
- http://www.securitytracker.com/id?1027032 ↗
- http://rhn.redhat.com/errata/RHSA-2012-0545.html ↗