CVE-2012-1610 in ImageMagick
Summary
Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of service (out-of-bounds read) via a large component count for certain EXIF tags in a JPEG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0259.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
03/12/2012
Disclosure
06/05/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 60902 | ImageMagick profile.c GetEXIFProperty numeric error | 189 | Not defined | Official fix | CVE-2012-1610 |