Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 146377 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.803816
Kategorie:Buffer overflow
Titel:ImageMagick < 6.7.5-8 Multiple Denial of Service Vulnerabilities (Jun 2013) - Windows
Zusammenfassung:ImageMagick is prone to multiple denial of service Vulnerabilities.
Beschreibung:Summary:
ImageMagick is prone to multiple denial of service Vulnerabilities.

Vulnerability Insight:
Multiple flaws exist due to:

- Error when parsing an IFD with IOP tag offsets pointing to the start
of the IFD.

- Improper sanitation of user supplied input when parsing offset and
count values of the ResolutionUnit tag in EXIF IFD0.

Vulnerability Impact:
Successful exploitation will allow a context-dependent attacker to cause
denial of service result in loss of availability for the application.

Affected Software/OS:
ImageMagick version 6.7.5-7 and earlier on Windows.

Solution:
Upgrade to ImageMagick version 6.7.5-8 or later.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2012-0248
BugTraq ID: 51957
http://www.securityfocus.com/bid/51957
Debian Security Information: DSA-2427 (Google Search)
http://www.debian.org/security/2012/dsa-2427
http://www.gentoo.org/security/en/glsa/glsa-201203-09.xml
http://www.cert.fi/en/reports/2012/vulnerability595210.html
http://www.osvdb.org/79003
RedHat Security Advisories: RHSA-2012:0544
http://rhn.redhat.com/errata/RHSA-2012-0544.html
RedHat Security Advisories: RHSA-2012:0545
http://rhn.redhat.com/errata/RHSA-2012-0545.html
http://www.securitytracker.com/id?1027032
http://secunia.com/advisories/47926
http://secunia.com/advisories/48247
http://secunia.com/advisories/48259
http://secunia.com/advisories/49043
http://secunia.com/advisories/49063
http://secunia.com/advisories/49068
http://ubuntu.com/usn/usn-1435-1
Common Vulnerability Exposure (CVE) ID: CVE-2012-0247
CopyrightCopyright (C) 2013 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.