ID de Prueba:	1.3.6.1.4.1.25623.1.0.803815
Categoría:	Buffer overflow
Título:	ImageMagick < 6.7.6-3 Multiple Denial of Service Vulnerabilities (Jun 2013) - Windows
Resumen:	ImageMagick is prone to multiple denial of service Vulnerabilities.
Descripción:	Summary: ImageMagick is prone to multiple denial of service Vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - Improper handling of JPEG restart markers of the 'JPEGWarningHandler()' function in coders/jpeg.c - Improper handling a JPEG EXIF tag of the 'GetEXIFProperty()' function in magick/property.c - Error occurs when parsing TIFF EXIF IFD of the 'TIFFGetEXIFProperties()' function in coders/tiff.c Vulnerability Impact: Successful exploitation will allow a context-dependent attacker to cause denial of service result in loss of availability for the application. Affected Software/OS: ImageMagick version before 6.7.6-3 on Windows. Solution: Upgrade to ImageMagick version 6.7.6-3 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0260 BugTraq ID: 52898 http://www.securityfocus.com/bid/52898 Debian Security Information: DSA-2462 (Google Search) http://www.debian.org/security/2012/dsa-2462 http://www.cert.fi/en/reports/2012/vulnerability635606.html http://www.osvdb.org/81022 RedHat Security Advisories: RHSA-2012:0544 http://rhn.redhat.com/errata/RHSA-2012-0544.html RedHat Security Advisories: RHSA-2012:0545 http://rhn.redhat.com/errata/RHSA-2012-0545.html http://www.securitytracker.com/id?1027032 http://secunia.com/advisories/48974 http://secunia.com/advisories/49063 http://secunia.com/advisories/49068 http://secunia.com/advisories/49317 http://secunia.com/advisories/55035 http://secunia.com/advisories/57224 SuSE Security Announcement: openSUSE-SU-2012:0692 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html http://www.ubuntu.com/usn/USN-2132-1 XForce ISS Database: imagemagick-jpegwarninghandler-dos(74658) https://exchange.xforce.ibmcloud.com/vulnerabilities/74658 Common Vulnerability Exposure (CVE) ID: CVE-2012-0259 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0259 http://www.osvdb.org/81021 http://secunia.com/advisories/48679 http://secunia.com/advisories/49043 http://ubuntu.com/usn/usn-1435-1 XForce ISS Database: imagemagick-jpegexif-dos(74657) https://exchange.xforce.ibmcloud.com/vulnerabilities/74657 Common Vulnerability Exposure (CVE) ID: CVE-2012-1798 http://www.osvdb.org/81023 XForce ISS Database: imagemagick-tiffexififd-dos(74659) https://exchange.xforce.ibmcloud.com/vulnerabilities/74659
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.