Memory corruption

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image...

Integer overflow

Multiple integer overflows in 1 magick/profile.c or 2 magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via crafted offset value in the ResolutionUnit tag in the EXIF IFD0 of an image. NOTE:...

Integer overflow

Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of service out-of-bounds read via a large component count for certain EXIF tags in a JPEG image. NOTE: this vulnerability exists because of an incomplete f...

CVE-2012-1610

CVE-2012-1610 affects ImageMagick: GetEXIFProperty in magick/property.c can overflow when processing EXIF tags with large component counts in a JPEG, leading to an out-of-bounds read and potential DoS. Affected releases reported include ImageMagick before 6.7.6-4; mitigation is to upgrade to 6.7....

CVE-2012-1610

Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of service out-of-bounds read via a large component count for certain EXIF tags in a JPEG image. NOTE: this vulnerability exists because of an incomplete f...

CVE-2012-1185

Multiple integer overflows in 1 magick/profile.c or 2 magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via crafted offset value in the ResolutionUnit tag in the EXIF IFD0 of an image. NOTE:...

CVE-2012-1185

ImageMagick 6.7.5 and earlier is affected by CVE-2012-1185 via an incorrect handling of the ResolutionUnit EXIF IFD0 offset, leading to memory corruption with crafted inputs and potential remote code execution. The issue is tied to an incomplete fix for CVE-2012-0247, as documented across multipl...

CVE-2012-0259

CVE-2012-0259 affects ImageMagick where the GetEXIFProperty function (magick/property.c) is vulnerable when processing JPEG EXIF XResolution tags. In ImageMagick versions before 6.7.6-3, a zero value in the component count can trigger an out-of-bounds read, leading to a denial of service (crash)....

CVE-2012-0247

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image...

CVE-2012-1185

Multiple integer overflows in 1 magick/profile.c or 2 magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via crafted offset value in the ResolutionUnit tag in the EXIF IFD0 of an image. NOTE:...

CVE-2012-1610

Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of service out-of-bounds read via a large component count for certain EXIF tags in a JPEG image. NOTE: this vulnerability exists because of an incomplete f...

CVE-2012-1798

The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted EXIF IFD in a TIFF image...

CVE-2012-0247: Improper Input Validation

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image...

ImageMagick < 6.7.6-3 Multiple Vulnerabilities

The remote Windows host is running a version of ImageMagick earlier than 6.7.6-3 and is, therefore, affected by the following vulnerabilities : - An error exists in the function 'GetEXIFProperty' in the file 'magick/property.c' that can cause the application to crash when processing JPEG 'EXIF'...

CVE-2012-1798: Out-of-bounds Read

The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted EXIF IFD in a TIFF image...

DiscuzX2个人空间图片EXIF信息XSS

简要描述： DiscuzX2个人空间图片EXIF信息XSS 详细说明： 图片里插入非法的EXIF信息。你懂的 xss漏洞产生。。。不过有点鸡肋，在特定条件下才能读取到EXIF信息。 漏洞证明： 图片里插入非法的EXIF信息。你懂的 img src="https://images.seebug.org/upload/201205/23215725fa5b5ae0b26fed9a7445b563cda46eb5.png" alt="" width="600" onerror="javascript:errimgthis;...

Mandriva Linux Security Advisory : imagemagick (MDVSA-2012:077)

Multiple vulnerabilities has been found and corrected in imagemagick : Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCOREINSTALLEDSUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working...

ImageMagick EXIF ResolutionUnit Handling Memory Corruption (CVE-2012-0247)

A buffer overflow vulnerability has been reported in ImageMagick...

CentOS 5 : ImageMagick (CESA-2012:0545)

Updated ImageMagick packages that fix three security issues and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CentOS 6 : ImageMagick (CESA-2012:0544)

Updated ImageMagick packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...