Описание
Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted IOP tag offsets in the IFD in an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0248.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 8:6.6.9.7-5ubuntu3.1 |
| hardy | ignored | end of life |
| lucid | released | 7:6.5.7.8-1ubuntu1.2 |
| natty | released | 7:6.6.2.6-1ubuntu4.1 |
| oneiric | released | 8:6.6.0.4-3ubuntu1.1 |
| precise | released | 8:6.6.9.7-5ubuntu3.1 |
| upstream | needs-triage |
Показывать по
EPSS
4.3 Medium
CVSS2
5.5 Medium
CVSS3
Связанные уязвимости
Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted IOP tag offsets in the IFD in an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0248.
Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted IOP tag offsets in the IFD in an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0248.
Integer overflow in the SyncImageProfiles function in profile.c in Ima ...
Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted IOP tag offsets in the IFD in an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0248.
EPSS
4.3 Medium
CVSS2
5.5 Medium
CVSS3