NetSight
IP …
medium5.5

CVE-2012-0248

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags t…

Impact

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.

Affected products

VendorProductAffected versions
ImagemagickImagemagick
through 6.7.5-7
DebianDebian Linux
Versions 6.0, 7.0
CanonicalUbuntu Linux
Versions 10.04, 11.04, 11.10, 12.04
RedhatStorage
Version 2.0
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0
RedhatEnterprise Linux Eus
Version 6.2
RedhatEnterprise Linux Server
Versions 5.0, 6.0
RedhatEnterprise Linux Server Aus
Version 6.2
RedhatEnterprise Linux Server Eus
Version 6.2
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0

Weakness classification

CWE-835

References