Pesquisadores
Voltar
Aleksis Kauppinen
Pesquisador de
Codenomicon CROSS project
#9468
de 60,450
33.8
CVSS total
Vulnerabilidades
·
5
Média
4
Alta
1
PT-2012-2438
2012-05-07
8.8
CVE-2012-0247
Imagemagick
Imagemagick
The issue allows remote attackers to cause a denial of service, potentially leading to memory corruption, and possibly execute arbitrary code. This is achieved through crafted offset and count values in the `ResolutionUnit` tag within the EXIF IFD0 of an image.
PT-2012-2439
2012-05-07
5.5
CVE-2012-0248
Imagemagick
Imagemagick
The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and hang, by providing a crafted image. This image has an IFD that contains IOP tags, all of which reference the beginning of the IDF.
PT-2012-2445
2012-05-07
6.5
CVE-2012-0259
Imagemagick
Imagemagick
The issue allows remote attackers to cause a denial of service (crash) via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read. This occurs due to a problem in the GetEXIFProperty function in magick/property.c.
PT-2012-2446
2012-05-07
6.5
CVE-2012-0260
Imagemagick
Imagemagick
The issue allows remote attackers to cause a denial of service, specifically memory consumption, by utilizing a JPEG image with a crafted sequence of restart markers. This is related to the JPEGWarningHandler function in coders/jpeg.c.
PT-2012-3546
2012-05-07
6.5
CVE-2012-1798
Imagemagick
Imagemagick
The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and crash, via a crafted EXIF IFD in a TIFF image. This is due to a problem in the TIFFGetEXIFProperties function in coders/tiff.c.