CVE-2012-1798
Fixed in a distro release EPSS 2%
The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted EXIF IFD in a TIFF image.
Products: imagemagick, debian_linux, redhat storage, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation, opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | imagemagick | 8:6.7.4.0-4 |
| Debian 13 | imagemagick | 8:6.7.4.0-4 |
| Debian 14 | imagemagick | 8:6.7.4.0-4 |
| Debian 6.0 | imagemagick | 8:6.6.0.4-3+squeeze3 |
| Red Hat Enterprise Linux 6 | ImageMagick | 0:6.5.4.7-6.el6_2 |
| Red Hat Enterprise Linux 6 | ImageMagick-c++ | 0:6.5.4.7-6.el6_2 |
| Red Hat Enterprise Linux 6 | ImageMagick-c++-devel | 0:6.5.4.7-6.el6_2 |
| Red Hat Enterprise Linux 6 | ImageMagick-debuginfo | 0:6.5.4.7-6.el6_2 |
| Red Hat Enterprise Linux 6 | ImageMagick-devel | 0:6.5.4.7-6.el6_2 |
| Red Hat Enterprise Linux 6 | ImageMagick-doc | 0:6.5.4.7-6.el6_2 |
| Red Hat Enterprise Linux 6 | ImageMagick-perl | 0:6.5.4.7-6.el6_2 |