Red Hat Security AdvisoryRHSA-2012:0545
ImageMagick security and bug fix update
Released 2012-05-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) ImageMagick-6.2.8.0-15.el5_8, ImageMagick-c++-devel-6.2.8.0-15.el5_8, ImageMagick-c++-devel-6.2.8.0-15.el5_8.i386 +2
- Red Hat Enterprise Linux (v. 5 server) ImageMagick-6.2.8.0-15.el5_8, ImageMagick-6.2.8.0-15.el5_8.i386, ImageMagick-6.2.8.0-15.el5_8.ia64 +17
- Red Hat Enterprise Linux Desktop (v. 5 client) ImageMagick-6.2.8.0-15.el5_8, ImageMagick-6.2.8.0-15.el5_8.i386, ImageMagick-c++-6.2.8.0-15.el5_8 +3
Fixes 3 records
Priority MEDIUM 45
ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03773 · Published 2012-06-05 · Fixed CWE-20
Priority LOW 33
The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (memory consumption) via a JPEG image with a crafted sequence of restart markers.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02333 · Published 2012-06-05 · Fixed CWE-400
Priority LOW 29
ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.02096 · Published 2012-06-05 · Fixed CWE-835
THREATIST.IORead the docs