Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2012-1610

Published: 05/06/2012 Updated: 14/08/2020
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Imagemagick

Vulnerability Summary

Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick prior to 6.7.6-4 allows remote malicious users to cause a denial of service (out-of-bounds read) via a large component count for certain EXIF tags in a JPEG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0259.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

imagemagick imagemagick

debian debian linux 6.0

canonical ubuntu linux 10.04

canonical ubuntu linux 11.04

canonical ubuntu linux 11.10

canonical ubuntu linux 12.04

opensuse opensuse 11.4

opensuse opensuse 12.1

Vendor Advisories

Ubuntu Security Notice: imagemagick vulnerabilities
ImageMagick could be made to crash or run programs as your login if it opened a specially crafted file ...
Debian CVElist Bug Report Logs: CVE-2012-0259 / CVE-2012-0260 / CVE-2012-1798 / CVE-2012-1610
Debian Bug report logs - #667635 CVE-2012-0259 / CVE-2012-0260 / CVE-2012-1798 / CVE-2012-1610 Package: imagemagick; Maintainer for imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Source for imagemagick is src:imagemagick (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <muehl ...
Debian CVElist Bug Report Logs: CVE-2012-1185 / CVE-2012-1186: incomplete ImageMagick fixes for CVE-2012-0247 / CVE-2012-0248
Debian Bug report logs - #665007 CVE-2012-1185 / CVE-2012-1186: incomplete ImageMagick fixes for CVE-2012-0247 / CVE-2012-0248 Package: imagemagick; Maintainer for imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Source for imagemagick is src:imagemagick (PTS, buildd, popcon) Reported ...

References

CWE-190http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629http://secunia.com/advisories/48974http://www.debian.org/security/2012/dsa-2462http://www.openwall.com/lists/oss-security/2012/04/04/6http://www.osvdb.org/81024http://secunia.com/advisories/49317http://secunia.com/advisories/49043http://www.securityfocus.com/bid/52898http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.htmlhttp://ubuntu.com/usn/usn-1435-1https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0259http://secunia.com/advisories/55035https://exchange.xforce.ibmcloud.com/vulnerabilities/74660https://usn.ubuntu.com/1435-1/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693CVE-2024-30851CVE-2024-34460CVE-2024-2887localCVE-2024-27956remote code executionCVE-2024-34475privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook