ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.
| Version | Base score | Base severity | Vector |
|---|
| Hyperlink | Resource Type |
|---|
ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.gentoo.org/security/en/glsa/glsa-201203-09.xml | vendor-advisory x_refsource_GENTOO x_transferred |
| http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20286 | x_refsource_CONFIRM x_transferred |
| http://secunia.com/advisories/49068 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.cert.fi/en/reports/2012/vulnerability595210.html | x_refsource_MISC x_transferred |
| http://secunia.com/advisories/48259 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://secunia.com/advisories/49043 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.securityfocus.com/bid/51957 | vdb-entry x_refsource_BID x_transferred |
| http://secunia.com/advisories/49063 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.debian.org/security/2012/dsa-2427 | vendor-advisory x_refsource_DEBIAN x_transferred |
| http://rhn.redhat.com/errata/RHSA-2012-0544.html | vendor-advisory x_refsource_REDHAT x_transferred |
| http://secunia.com/advisories/47926 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://ubuntu.com/usn/usn-1435-1 | vendor-advisory x_refsource_UBUNTU x_transferred |
| http://secunia.com/advisories/48247 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.osvdb.org/79003 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.securitytracker.com/id?1027032 | vdb-entry x_refsource_SECTRACK x_transferred |
| http://rhn.redhat.com/errata/RHSA-2012-0545.html | vendor-advisory x_refsource_REDHAT x_transferred |
ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 3.1 | 5.5 | MEDIUM | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
| Primary | 2.0 | 4.3 | MEDIUM | AV:N/AC:M/Au:N/C:N/I:N/A:P |
| Hyperlink | Source | Resource |
|---|---|---|
| http://rhn.redhat.com/errata/RHSA-2012-0544.html | cret@cert.org | Third Party Advisory |
| http://rhn.redhat.com/errata/RHSA-2012-0545.html | cret@cert.org | Third Party Advisory |
| http://secunia.com/advisories/47926 | cret@cert.org | Broken Link |
| http://secunia.com/advisories/48247 | cret@cert.org | Broken Link |
| http://secunia.com/advisories/48259 | cret@cert.org | Broken Link |
| http://secunia.com/advisories/49043 | cret@cert.org | Broken Link |
| http://secunia.com/advisories/49063 | cret@cert.org | Broken Link |
| http://secunia.com/advisories/49068 | cret@cert.org | Broken Link |
| http://ubuntu.com/usn/usn-1435-1 | cret@cert.org | Third Party Advisory |
| http://www.cert.fi/en/reports/2012/vulnerability595210.html | cret@cert.org | Broken Link |
| http://www.debian.org/security/2012/dsa-2427 | cret@cert.org | Third Party Advisory |
| http://www.gentoo.org/security/en/glsa/glsa-201203-09.xml | cret@cert.org | Third Party Advisory |
| http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20286 | cret@cert.org | Issue Tracking Patch Vendor Advisory |
| http://www.osvdb.org/79003 | cret@cert.org | Broken Link |
| http://www.securityfocus.com/bid/51957 | cret@cert.org | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id?1027032 | cret@cert.org | Third Party Advisory VDB Entry |
| http://rhn.redhat.com/errata/RHSA-2012-0544.html | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://rhn.redhat.com/errata/RHSA-2012-0545.html | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://secunia.com/advisories/47926 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://secunia.com/advisories/48247 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://secunia.com/advisories/48259 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://secunia.com/advisories/49043 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://secunia.com/advisories/49063 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://secunia.com/advisories/49068 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://ubuntu.com/usn/usn-1435-1 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.cert.fi/en/reports/2012/vulnerability595210.html | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://www.debian.org/security/2012/dsa-2427 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.gentoo.org/security/en/glsa/glsa-201203-09.xml | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory |
| http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20286 | af854a3a-2127-422b-91ae-364da2661108 | Issue Tracking Patch Vendor Advisory |
| http://www.osvdb.org/79003 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://www.securityfocus.com/bid/51957 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id?1027032 | af854a3a-2127-422b-91ae-364da2661108 | Third Party Advisory VDB Entry |