NetSight
IP …
high8.8

CVE-2012-0247

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset…

Impact

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image.

Affected products

VendorProductAffected versions
ImagemagickImagemagick
through 6.7.5-7
DebianDebian Linux
Versions 6.0, 7.0
CanonicalUbuntu Linux
Versions 10.04, 11.04, 11.10, 12.04
RedhatStorage
Version 2.0
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0
RedhatEnterprise Linux Eus
Version 6.2
RedhatEnterprise Linux Server
Versions 5.0, 6.0
RedhatEnterprise Linux Server Aus
Version 6.2
RedhatEnterprise Linux Server Eus
Version 6.2
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0

Weakness classification

CWE-20

References