CVE-2012-1186

Name of the Vulnerable Software and Affected Versions ImageMagick versions 6.7.5-8 and earlier

Description The issue is caused by an integer overflow in the SyncImageProfiles function in profile.c, which allows remote attackers to cause a denial of service (infinite loop) via crafted IOP tag offsets in the IFD in an image.

Recommendations For ImageMagick versions 6.7.5-8 and earlier, update to a version that includes a complete fix for the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.