Summary
The host is installed with ImageMagick and is prone to multiple denial of service Vulnerabilities.
Impact
Successful exploitation will allow a context-dependent attacker to cause denial of service result in loss of availability for the application.
Impact Level: Application
Solution
Upgrade to ImageMagick version 6.7.5-8 or later.
http://www.imagemagick.org/script/download.php
Insight
Multiple flaw is due to,
- Error when parsing an IFD with IOP tag offsets pointing to the start of the IFD.
- Improper sanitation of user supplied input when parsing offset and count values of the ResolutionUnit tag in EXIF IFD0.
Affected
ImageMagick version 6.7.5-7 and earlier on Windows.
References
Severity
Classification
-
CVE CVE-2012-0247, CVE-2012-0248 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities