CVE-2012-0259: Medium severity imagemagick vulnerability
The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (crash) via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0259?
CVE-2012-0259 has a medium severity rating due to its potential to cause a denial of service.
How do I fix CVE-2012-0259?
To fix CVE-2012-0259, upgrade ImageMagick to version 6.7.6-3 or later.
What kind of attack does CVE-2012-0259 enable?
CVE-2012-0259 enables remote attackers to crash the application via specially crafted JPEG files.
Which software versions are affected by CVE-2012-0259?
CVE-2012-0259 affects multiple versions of ImageMagick prior to 6.7.6-3 and specific versions of various Linux distributions.
How can I determine if I'm vulnerable to CVE-2012-0259?
You can determine if you are vulnerable by checking your ImageMagick version against the known vulnerable versions listed in the CVE description.