ID de Prueba:	1.3.6.1.4.1.25623.1.0.803816
Categoría:	Buffer overflow
Título:	ImageMagick < 6.7.5-8 Multiple Denial of Service Vulnerabilities (Jun 2013) - Windows
Resumen:	ImageMagick is prone to multiple denial of service Vulnerabilities.
Descripción:	Summary: ImageMagick is prone to multiple denial of service Vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - Error when parsing an IFD with IOP tag offsets pointing to the start of the IFD. - Improper sanitation of user supplied input when parsing offset and count values of the ResolutionUnit tag in EXIF IFD0. Vulnerability Impact: Successful exploitation will allow a context-dependent attacker to cause denial of service result in loss of availability for the application. Affected Software/OS: ImageMagick version 6.7.5-7 and earlier on Windows. Solution: Upgrade to ImageMagick version 6.7.5-8 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0248 BugTraq ID: 51957 http://www.securityfocus.com/bid/51957 Debian Security Information: DSA-2427 (Google Search) http://www.debian.org/security/2012/dsa-2427 http://www.gentoo.org/security/en/glsa/glsa-201203-09.xml http://www.cert.fi/en/reports/2012/vulnerability595210.html http://www.osvdb.org/79003 RedHat Security Advisories: RHSA-2012:0544 http://rhn.redhat.com/errata/RHSA-2012-0544.html RedHat Security Advisories: RHSA-2012:0545 http://rhn.redhat.com/errata/RHSA-2012-0545.html http://www.securitytracker.com/id?1027032 http://secunia.com/advisories/47926 http://secunia.com/advisories/48247 http://secunia.com/advisories/48259 http://secunia.com/advisories/49043 http://secunia.com/advisories/49063 http://secunia.com/advisories/49068 http://ubuntu.com/usn/usn-1435-1 Common Vulnerability Exposure (CVE) ID: CVE-2012-0247
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.