CVE-2012-1798: Medium severity ImageMagick ImageMagick vulnerability
Published Jun 5, 2012
·Updated
The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted EXIF IFD in a TIFF image.
Affected Software
11 affected components
ImageMagick ImageMagick<6.7.6-3
Debian Debian Linux=6.0
redhat Storage=2.0
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Eus=6.2
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Server Aus=6.2
redhat Enterprise Linux Server Eus=6.2
redhat Enterprise Linux Workstation=6.0
openSUSE openSUSE=11.4
openSUSE openSUSE=12.1
Remediation
Event History
Jun 5, 2012
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1798?
CVE-2012-1798 is classified as a denial of service vulnerability.
2
How do I fix CVE-2012-1798?
To fix CVE-2012-1798, update ImageMagick to version 6.7.6-3 or later.
3
What is the impact of exploiting CVE-2012-1798?
Exploiting CVE-2012-1798 can lead to an out-of-bounds read and crash of the ImageMagick process.
4
Which versions of ImageMagick are affected by CVE-2012-1798?
ImageMagick versions before 6.7.6-3 are affected by CVE-2012-1798.
5
Can CVE-2012-1798 be exploited remotely?
Yes, CVE-2012-1798 can be exploited remotely via crafted TIFF images.