CVE-2012-0248

MEDIUM

5.5

CVSS Score

Published: June 5, 2012 at 10:00 PM UTC

Updated: June 16, 2026 at 11:36 PM UTC

10 products affected across 4 vendorsDebian LinuxUbuntu LinuxEnterprise Linux Desktop

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 2%

Description

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux · Canonicalrubygems

95%

10.04 11.04 11.10 12.04

Debian Linux · Debiandrupal

95%

6.0 7.0

ImageMagick · Imagemagick

95%

v ≤ 6.7.5-7

Enterprise Linux Desktop · Red Hatrubygems

95%

5.0 6.0

Enterprise Linux Eus · Red Hatrpm

95%

6.2

Enterprise Linux Server · Red Hatrubygems

95%

5.0 6.0

Enterprise Linux Server Aus · Red Hatrubygems

95%

6.2

Enterprise Linux Server Eus · Red Hatrubygems

95%

6.2

Enterprise Linux Workstation · Red Hatrubygems

95%

5.0 6.0

Storage · Red Hatrpm

95%

2.0

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (16)

Vendor Advisoryx_refsource_REDHATThird Party Advisory

Source: [email protected]

http://rhn.redhat.com/errata/RHSA-2012-0544.html

Vendor Advisoryx_refsource_REDHATThird Party Advisory

Source: [email protected]

http://rhn.redhat.com/errata/RHSA-2012-0545.html