Test Kennung:	1.3.6.1.4.1.25623.1.0.803815
Kategorie:	Buffer overflow
Titel:	ImageMagick Multiple Denial of Service Vulnerabilities - 01 June13 (Windows)
Zusammenfassung:	The host is installed with ImageMagick and is prone to multiple; denial of service Vulnerabilities.
Beschreibung:	Summary: The host is installed with ImageMagick and is prone to multiple denial of service Vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - Improper handling of JPEG restart markers of the 'JPEGWarningHandler()' function in coders/jpeg.c - Improper handling a JPEG EXIF tag of the 'GetEXIFProperty()' function in magick/property.c - Error occurs when parsing TIFF EXIF IFD of the 'TIFFGetEXIFProperties()' function in coders/tiff.c Vulnerability Impact: Successful exploitation will allow a context-dependent attacker to cause denial of service result in loss of availability for the application. Affected Software/OS: ImageMagick version before 6.7.6-3 on Windows. Solution: Upgrade to ImageMagick version 6.7.6-3 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Querverweis:	BugTraq ID: 52898 Common Vulnerability Exposure (CVE) ID: CVE-2012-0260 http://www.securityfocus.com/bid/52898 Debian Security Information: DSA-2462 (Google Search) http://www.debian.org/security/2012/dsa-2462 http://www.cert.fi/en/reports/2012/vulnerability635606.html http://www.osvdb.org/81022 RedHat Security Advisories: RHSA-2012:0544 http://rhn.redhat.com/errata/RHSA-2012-0544.html RedHat Security Advisories: RHSA-2012:0545 http://rhn.redhat.com/errata/RHSA-2012-0545.html http://www.securitytracker.com/id?1027032 http://secunia.com/advisories/48974 http://secunia.com/advisories/49063 http://secunia.com/advisories/49068 http://secunia.com/advisories/49317 http://secunia.com/advisories/55035 http://secunia.com/advisories/57224 SuSE Security Announcement: openSUSE-SU-2012:0692 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html http://www.ubuntu.com/usn/USN-2132-1 XForce ISS Database: imagemagick-jpegwarninghandler-dos(74658) https://exchange.xforce.ibmcloud.com/vulnerabilities/74658 Common Vulnerability Exposure (CVE) ID: CVE-2012-0259 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0259 http://www.osvdb.org/81021 http://secunia.com/advisories/48679 http://secunia.com/advisories/49043 http://ubuntu.com/usn/usn-1435-1 XForce ISS Database: imagemagick-jpegexif-dos(74657) https://exchange.xforce.ibmcloud.com/vulnerabilities/74657 Common Vulnerability Exposure (CVE) ID: CVE-2012-1798 http://www.osvdb.org/81023 XForce ISS Database: imagemagick-tiffexififd-dos(74659) https://exchange.xforce.ibmcloud.com/vulnerabilities/74659
Copyright	Copyright (C) 2013 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.