Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-1185
HistoryJun 05, 2012 - 10:55 p.m.

CVE-2012-1185

2012-06-0522:55:09
CWE-190
[email protected]
web.nvd.nist.gov
1

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.781 High

EPSS

Percentile

98.3%

JSON

Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset value in the ResolutionUnit tag in the EXIF IFD0 of an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0247.

Affected configurations

NVD
Node
imagemagickimagemagickRange≤6.7.5
Node
debiandebian_linuxMatch6.0
Node
canonicalubuntu_linuxMatch10.04
OR
canonicalubuntu_linuxMatch11.04
OR
canonicalubuntu_linuxMatch11.10
OR
canonicalubuntu_linuxMatch12.04esm
Node
opensuseopensuseMatch11.4
OR
opensuseopensuseMatch12.1

Related

debiancve 2
prion 2
ubuntucve 4
cvelist 2
cve 2
nessus 21
openvas 29
veracode 1
nvd 1
checkpoint_advisories 1
securityvulns 4
ubuntu 1
oraclelinux 2
gentoo 2
osv 1
debian 3
redhat 2
centos 2
amazon 1
debiancve
debiancve
CVE-2012-1185
2012-06-05 22:55:09
CVE-2012-0247
2012-06-05 22:55:06
prion
prion
Integer overflow
2012-06-05 22:55:00
Memory corruption
2012-06-05 22:55:00
ubuntucve
ubuntucve
CVE-2012-0247
2012-02-13 00:00:00
CVE-2012-1185
2012-04-23 00:00:00
CVE-2012-0248
2012-02-13 00:00:00
cvelist
cvelist
CVE-2012-1185
2012-06-05 22:00:00
CVE-2012-0247
2012-06-05 22:00:00
cve
cve
CVE-2012-1185
2012-06-05 22:55:09
CVE-2012-0247
2012-06-05 22:55:06
nessus
nessus
ImageMagick < 6.7.5-8 Multiple Vulnerabilities
2012-06-05 00:00:00
Mandriva Linux Security Advisory : imagemagick (MDVSA-2012:078)
2012-09-06 00:00:00
GLSA-201405-09 : ImageMagick: Multiple vulnerabilities
2014-05-19 00:00:00
openvas
openvas
ImageMagick < 6.7.5-1 Integer Overflow Vulnerability (Jun 2013) - Windows
2013-06-24 00:00:00
ImageMagick Integer Overflow Vulnerability - 01 June13 (Windows)
2013-06-24 00:00:00
Mandriva Update for imagemagick MDVSA-2012:078 (imagemagick)
2012-08-03 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:51:08
nvd
nvd
CVE-2012-0247
2012-06-05 22:55:06
checkpoint_advisories
checkpoint_advisories
ImageMagick EXIF ResolutionUnit Handling Memory Corruption (CVE-2012-0247)
2012-05-14 00:00:00
securityvulns
securityvulns
imagemagic security vulnerabilities
2012-03-09 00:00:00
[SECURITY] [DSA 2427-1] imagemagick security update
2012-03-09 00:00:00
Imagemagic multiple security vulnerabilities
2012-05-01 00:00:00
ubuntu
ubuntu
ImageMagick vulnerabilities
2012-05-01 00:00:00
oraclelinux
oraclelinux
ImageMagick security and bug fix update
2012-05-07 00:00:00
ImageMagick security update
2012-05-07 00:00:00
gentoo
gentoo
ImageMagick: User-assisted execution of arbitrary code
2012-03-06 00:00:00
ImageMagick: Multiple vulnerabilities
2014-05-17 00:00:00
osv
osv
imagemagick - several
2012-03-06 00:00:00
debian
debian
[SECURITY] [DSA 2427-1] imagemagick security update
2012-03-06 19:13:37
[SECURITY] [DSA 2462-1] imagemagick security update
2012-04-29 12:01:38
[SECURITY] [DSA 2462-2] imagemagick regression update
2012-05-03 21:53:43
redhat
redhat
(RHSA-2012:0545) Moderate: ImageMagick security and bug fix update
2012-05-07 00:00:00
(RHSA-2012:0544) Moderate: ImageMagick security update
2012-05-07 00:00:00
centos
centos
ImageMagick security update
2012-05-07 21:07:07
ImageMagick security update
2012-05-07 22:49:25
amazon
amazon
Medium: ImageMagick
2012-05-08 23:14:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

High

0.781 High

EPSS

Percentile

98.3%

JSON
Related for NVD:CVE-2012-1185
debiancve2prion2ubuntucve4cvelist2cve2nessus21openvas29veracode1nvd1checkpoint_advisories1securityvulns4ubuntu1oraclelinux2gentoo2osv1debian3redhat2centos2amazon1