CVE-2012-0260

Medium

Description

The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (memory consumption) via a JPEG image with a crafted sequence of restart markers.

SeverityMedium
CVSS6.5
Exploit probability—
ProductImagemagick
PublishedJun 5, 2012
First seenJun 5, 2012

How to fix

Update
  • imagemagick imagemagick6.7.6-3 or later

Affected products

ProductAffected versionsFixed in
imagemagick imagemagickv < 6.7.6-36.7.6-3
canonical ubuntu_linux12.04, 12.10, 13.10—
debian debian_linux6.0—
redhat storage2.0—
redhat enterprise_linux_aus6.2—
redhat enterprise_linux_desktop5.0, 6.0—
redhat enterprise_linux_eus6.2—
redhat enterprise_linux_server5.0, 6.0—
redhat enterprise_linux_server_eus6.2—
redhat enterprise_linux_workstation5.0, 6.0—
opensuse opensuse11.4, 12.1—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2012-0260 · Imagemagick · Dark Radar