CVE-2012-1610

moderate-risk
Published 2012-06-05

Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of service (out-of-bounds read) via a large component count for certain EXIF tags in a JPEG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0259.

Do I need to act?

~
7.0% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (8)

Affected Vendors

Opensuse Imagemagick Debian Canonical

References (26)

Mailing List http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html
Broken Link http://secunia.com/advisories/48974
Broken Link http://secunia.com/advisories/49043
Broken Link http://secunia.com/advisories/49317
Broken Link http://secunia.com/advisories/55035
Third Party Advisory http://ubuntu.com/usn/usn-1435-1
Third Party Advisory http://www.debian.org/security/2012/dsa-2462
Issue Tracking http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629
Mailing List http://www.openwall.com/lists/oss-security/2012/04/04/6
Broken Link http://www.osvdb.org/81024
Third Party Advisory http://www.securityfocus.com/bid/52898
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0259
Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/74660
Mailing List http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html
Broken Link http://secunia.com/advisories/48974
Broken Link http://secunia.com/advisories/49043
Broken Link http://secunia.com/advisories/49317
Broken Link http://secunia.com/advisories/55035
Third Party Advisory http://ubuntu.com/usn/usn-1435-1
Third Party Advisory http://www.debian.org/security/2012/dsa-2462
and 6 more references
49
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 9/34 · Low
Exposure 14/34 · Moderate