PublicDateAtUSN: 2012-06-05
Candidate: CVE-2012-0260
PublicDate: 2012-06-05 22:55:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0260
 http://www.cert.fi/en/reports/2012/vulnerability635606.html
 https://ubuntu.com/security/notices/USN-2132-1
Description:
 The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before
 6.7.6-3 allows remote attackers to cause a denial of service (memory
 consumption) via a JPEG image with a crafted sequence of restart markers.
Ubuntu-Description:
Notes:
 mdeslaur> see fixes in CVE-2012-0259
Bugs:
 https://bugzilla.redhat.com/show_bug.cgi?id=807994
Priority: low
Discovered-by: Aleksis Kauppinen, Joonas Kuorilehto and Tuomas Parttimaa
Assigned-to: mdeslaur
CVSS:
 nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H [6.5 MEDIUM]

Patches_imagemagick:
 vendor: http://www.debian.org/security/2012/dsa-2462
 upstream: http://trac.imagemagick.org/changeset/7249
upstream_imagemagick: released (8:6.7.4.0-5)
hardy_imagemagick: ignored (reached end-of-life)
lucid_imagemagick: ignored (reached end-of-life)
maverick_imagemagick: ignored (reached end-of-life)
natty_imagemagick: ignored (reached end-of-life)
oneiric_imagemagick: ignored (reached end-of-life)
precise_imagemagick: released (8:6.6.9.7-5ubuntu3.3)
quantal_imagemagick: not-affected (8:6.7.7.10-2ubuntu4)
raring_imagemagick: not-affected (8:6.7.7.10-2ubuntu4)
saucy_imagemagick: not-affected (8:6.7.7.10-2ubuntu4)
devel_imagemagick: not-affected (8:6.7.7.10-2ubuntu4)