CVE-2012-1185: Integer Overflow
Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset value in the ResolutionUnit tag in the EXIF IFD0 of an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0247.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1185?
CVE-2012-1185 has been rated as a high severity vulnerability due to its potential to cause memory corruption and remote code execution.
How do I fix CVE-2012-1185?
To fix CVE-2012-1185, update ImageMagick to a version later than 6.7.5.
What types of attacks can be executed through CVE-2012-1185?
CVE-2012-1185 can be exploited to perform denial of service attacks or potentially execute arbitrary code.
Which versions of ImageMagick are affected by CVE-2012-1185?
CVE-2012-1185 affects ImageMagick version 6.7.5 and earlier.
Can CVE-2012-1185 be exploited through malicious images?
Yes, an attacker can exploit CVE-2012-1185 by using crafted images with specially manipulated ResolutionUnit tags.