NetSight
IP …
medium5.5

CVE-2012-1186

Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service (infini…

Impact

Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted IOP tag offsets in the IFD in an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0248.

Affected products

VendorProductAffected versions
ImagemagickImagemagick
through 6.7.5-8
DebianDebian Linux
Version 6.0
CanonicalUbuntu Linux
Versions 10.04, 11.04, 11.10, 12.04
OpensuseOpensuse
Versions 11.4, 12.1

Weakness classification

CWE-835

References