Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.803815
Kategorie:Buffer overflow
Titel:ImageMagick < 6.7.6-3 Multiple Denial of Service Vulnerabilities (Jun 2013) - Windows
Zusammenfassung:ImageMagick is prone to multiple denial of service Vulnerabilities.
Beschreibung:Summary:
ImageMagick is prone to multiple denial of service Vulnerabilities.

Vulnerability Insight:
Multiple flaws exist due to:

- Improper handling of JPEG restart markers of the 'JPEGWarningHandler()'
function in coders/jpeg.c

- Improper handling a JPEG EXIF tag of the 'GetEXIFProperty()' function
in magick/property.c

- Error occurs when parsing TIFF EXIF IFD of the 'TIFFGetEXIFProperties()'
function in coders/tiff.c

Vulnerability Impact:
Successful exploitation will allow a context-dependent attacker to cause
denial of service result in loss of availability for the application.

Affected Software/OS:
ImageMagick version before 6.7.6-3 on Windows.

Solution:
Upgrade to ImageMagick version 6.7.6-3 or later.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:N/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2012-0260
BugTraq ID: 52898
http://www.securityfocus.com/bid/52898
Debian Security Information: DSA-2462 (Google Search)
http://www.debian.org/security/2012/dsa-2462
http://www.cert.fi/en/reports/2012/vulnerability635606.html
http://www.osvdb.org/81022
RedHat Security Advisories: RHSA-2012:0544
http://rhn.redhat.com/errata/RHSA-2012-0544.html
RedHat Security Advisories: RHSA-2012:0545
http://rhn.redhat.com/errata/RHSA-2012-0545.html
http://www.securitytracker.com/id?1027032
http://secunia.com/advisories/48974
http://secunia.com/advisories/49063
http://secunia.com/advisories/49068
http://secunia.com/advisories/49317
http://secunia.com/advisories/55035
http://secunia.com/advisories/57224
SuSE Security Announcement: openSUSE-SU-2012:0692 (Google Search)
http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html
http://www.ubuntu.com/usn/USN-2132-1
XForce ISS Database: imagemagick-jpegwarninghandler-dos(74658)
https://exchange.xforce.ibmcloud.com/vulnerabilities/74658
Common Vulnerability Exposure (CVE) ID: CVE-2012-0259
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0259
http://www.osvdb.org/81021
http://secunia.com/advisories/48679
http://secunia.com/advisories/49043
http://ubuntu.com/usn/usn-1435-1
XForce ISS Database: imagemagick-jpegexif-dos(74657)
https://exchange.xforce.ibmcloud.com/vulnerabilities/74657
Common Vulnerability Exposure (CVE) ID: CVE-2012-1798
http://www.osvdb.org/81023
XForce ISS Database: imagemagick-tiffexififd-dos(74659)
https://exchange.xforce.ibmcloud.com/vulnerabilities/74659
CopyrightCopyright (C) 2013 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.