CVE-2012-1185
High · 7.8CVSS
7.8
EPSS
27.9%
Published
Jun 5, 2012
CISA due date
—
The record
Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset value in the ResolutionUnit tag in the EXIF IFD0 of an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0247.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | imagemagick | 0 | 8:6.6.9.7-7 |
| Debian:12 | imagemagick | 0 | 8:6.6.9.7-7 |
| Debian:13 | imagemagick | 0 | 8:6.6.9.7-7 |
| Debian:6.0 | imagemagick | 0 | 8:6.6.0.4-3+squeeze3 |
| openSUSE:Tumbleweed | ImageMagick | 0 | 6.9.6.6-1.1 |
Related vulnerabilities
- CVE-2014-2030 Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick… Also affects imagemagick
- CVE-2017-15277 ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the… Also affects imagemagick
- CVE-2017-14528 The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect… Also affects imagemagick
- CVE-2017-13144 In ImageMagick before 6.9.7-10, there is a crash (rather than a "width or height exceeds… Also affects imagemagick
- CVE-2017-10928 In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in… Also affects imagemagick
- CVE-2014-8354 The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote… Also affects imagemagick
- CVE-2017-7606 coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of… Also affects imagemagick
- CVE-2017-6498 An issue was discovered in ImageMagick 6.9.7. Also affects imagemagick