Patchwire CVEs, their patch status, and feeds to follow them

CVE-2012-0247

Fixed in a distro release EPSS 4%

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image.

Published 2012-06-05 · CVE record · OSV

Products: imagemagick, debian_linux, canonical ubuntu_linux, redhat storage, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation

Distro releases

ReleasePackageFixed in
Debian 12imagemagick8:6.6.9.7-6
Debian 13imagemagick8:6.6.9.7-6
Debian 14imagemagick8:6.6.9.7-6
Debian 6.0imagemagick8:6.6.0.4-3+squeeze1
Red Hat Enterprise Linux 5ImageMagick0:6.2.8.0-15.el5_8
Red Hat Enterprise Linux 5ImageMagick-c++0:6.2.8.0-15.el5_8
Red Hat Enterprise Linux 5ImageMagick-c++-devel0:6.2.8.0-15.el5_8
Red Hat Enterprise Linux 5ImageMagick-debuginfo0:6.2.8.0-15.el5_8
Red Hat Enterprise Linux 5ImageMagick-devel0:6.2.8.0-15.el5_8
Red Hat Enterprise Linux 5ImageMagick-perl0:6.2.8.0-15.el5_8
Red Hat Enterprise Linux 6ImageMagick0:6.5.4.7-6.el6_2
Red Hat Enterprise Linux 6ImageMagick-c++0:6.5.4.7-6.el6_2
Red Hat Enterprise Linux 6ImageMagick-c++-devel0:6.5.4.7-6.el6_2
Red Hat Enterprise Linux 6ImageMagick-debuginfo0:6.5.4.7-6.el6_2
Red Hat Enterprise Linux 6ImageMagick-devel0:6.5.4.7-6.el6_2
Red Hat Enterprise Linux 6ImageMagick-doc0:6.5.4.7-6.el6_2
Red Hat Enterprise Linux 6ImageMagick-perl0:6.5.4.7-6.el6_2
openSUSE TumbleweedImageMagick6.9.6.6-1.1