CVE-2012-0248
Fixed in a distro release EPSS 2%
ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.
Products: imagemagick, debian_linux, canonical ubuntu_linux, redhat storage, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | imagemagick | 8:6.6.9.7-6 |
| Debian 13 | imagemagick | 8:6.6.9.7-6 |
| Debian 14 | imagemagick | 8:6.6.9.7-6 |
| Debian 6.0 | imagemagick | 8:6.6.0.4-3+squeeze1 |
| Red Hat Enterprise Linux 5 | ImageMagick | 0:6.2.8.0-15.el5_8 |
| Red Hat Enterprise Linux 5 | ImageMagick-c++ | 0:6.2.8.0-15.el5_8 |
| Red Hat Enterprise Linux 5 | ImageMagick-c++-devel | 0:6.2.8.0-15.el5_8 |
| Red Hat Enterprise Linux 5 | ImageMagick-debuginfo | 0:6.2.8.0-15.el5_8 |
| Red Hat Enterprise Linux 5 | ImageMagick-devel | 0:6.2.8.0-15.el5_8 |
| Red Hat Enterprise Linux 5 | ImageMagick-perl | 0:6.2.8.0-15.el5_8 |
| Red Hat Enterprise Linux 6 | ImageMagick | 0:6.5.4.7-6.el6_2 |
| Red Hat Enterprise Linux 6 | ImageMagick-c++ | 0:6.5.4.7-6.el6_2 |
| Red Hat Enterprise Linux 6 | ImageMagick-c++-devel | 0:6.5.4.7-6.el6_2 |
| Red Hat Enterprise Linux 6 | ImageMagick-debuginfo | 0:6.5.4.7-6.el6_2 |
| Red Hat Enterprise Linux 6 | ImageMagick-devel | 0:6.5.4.7-6.el6_2 |
| Red Hat Enterprise Linux 6 | ImageMagick-doc | 0:6.5.4.7-6.el6_2 |
| Red Hat Enterprise Linux 6 | ImageMagick-perl | 0:6.5.4.7-6.el6_2 |
| openSUSE Tumbleweed | ImageMagick | 6.9.6.6-1.1 |