8.8

CVE-2012-0247

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Imagemagick ≫ Imagemagick Version <= 6.7.5-7
Debian ≫ Debian Linux Version6.0
Debian ≫ Debian Linux Version7.0
Canonical ≫ Ubuntu Linux Version10.04
Canonical ≫ Ubuntu Linux Version11.04
Canonical ≫ Ubuntu Linux Version11.10
Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm
Redhat ≫ Storage Version2.0
Redhat ≫ Enterprise Linux Eus Version6.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.82% 0.887
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://rhn.redhat.com/errata/RHSA-2012-0544.html
Third Party Advisory
http://secunia.com/advisories/49063
Broken Link
http://rhn.redhat.com/errata/RHSA-2012-0545.html
Third Party Advisory
http://secunia.com/advisories/47926
Broken Link
http://secunia.com/advisories/48247
Broken Link
http://secunia.com/advisories/48259
Broken Link
http://secunia.com/advisories/49043
Broken Link
http://secunia.com/advisories/49068
Broken Link
http://ubuntu.com/usn/usn-1435-1
Third Party Advisory
http://www.cert.fi/en/reports/2012/vulnerability595210.html
Broken Link
http://www.debian.org/security/2012/dsa-2427
Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-201203-09.xml
Third Party Advisory
http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20286
Patch
Vendor Advisory
Issue Tracking
http://www.osvdb.org/79003
Broken Link
http://www.securitytracker.com/id?1027032
Third Party Advisory
VDB Entry