Red Hat Security AdvisoryRHSA-2012:0544
ImageMagick security update
Released 2012-05-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) ImageMagick-6.5.4.7-6.el6_2, ImageMagick-c++-6.5.4.7-6.el6_2
- Red Hat Enterprise Linux Desktop Optional (v. 6) ImageMagick-6.5.4.7-6.el6_2, ImageMagick-c++-6.5.4.7-6.el6_2, ImageMagick-c++-devel-6.5.4.7-6.el6_2 +3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ImageMagick-6.5.4.7-6.el6_2, ImageMagick-c++-6.5.4.7-6.el6_2, ImageMagick-c++-devel-6.5.4.7-6.el6_2 +3
- Red Hat Enterprise Linux Server (v. 6) ImageMagick-6.5.4.7-6.el6_2, ImageMagick-6.5.4.7-6.el6_2.ppc, ImageMagick-c++-6.5.4.7-6.el6_2
- Red Hat Enterprise Linux Server Optional (v. 6) ImageMagick-6.5.4.7-6.el6_2, ImageMagick-c++-6.5.4.7-6.el6_2, ImageMagick-c++-6.5.4.7-6.el6_2.ppc +6
- Red Hat Enterprise Linux Workstation (v. 6) ImageMagick-6.5.4.7-6.el6_2, ImageMagick-c++-6.5.4.7-6.el6_2
- Red Hat Enterprise Linux Workstation Optional (v. 6) ImageMagick-6.5.4.7-6.el6_2, ImageMagick-c++-6.5.4.7-6.el6_2, ImageMagick-c++-devel-6.5.4.7-6.el6_2 +3
Fixes 6 records
Priority MEDIUM 45
ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03773 · Published 2012-06-05 · Fixed CWE-20
Priority LOW 33
The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted EXIF IFD in a TIFF image.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0237 · Published 2012-06-05 · Fixed CWE-125
Priority LOW 33
The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (memory consumption) via a JPEG image with a crafted sequence of restart markers.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02333 · Published 2012-06-05 · Fixed CWE-400
Priority LOW 33
The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (crash) via a zero value in the component count of an EXIF XResolution tag in a JPEG fi…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02333 · Published 2012-06-05 · Fixed CWE-125
Priority LOW 30
Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current w…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00354 · Published 2010-11-22 · Partial fix
Priority LOW 29
ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.02096 · Published 2012-06-05 · Fixed CWE-835
THREATIST.IORead the docs