PublicDateAtUSN: 2012-04-03
Candidate: CVE-2012-1610
PublicDate: 2012-06-05 22:55:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1610
 https://ubuntu.com/security/notices/USN-1435-1
Description:
 Integer overflow in the GetEXIFProperty function in magick/property.c in
 ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of
 service (out-of-bounds read) via a large component count for certain EXIF
 tags in a JPEG image.  NOTE: this vulnerability exists because of an
 incomplete fix for CVE-2012-0259.
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by: 
Assigned-to:
CVSS:
 nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [7.5 HIGH]

Patches_imagemagick:
 upstream: http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629#p82865
 upstream: http://trac.imagemagick.org/changeset/7321/ImageMagick/branches/ImageMagick-6/magick/property.c
 upstream: http://trac.imagemagick.org/changeset/7322
 upstream: http://trac.imagemagick.org/changeset/7323
upstream_imagemagick: needs-triage
hardy_imagemagick: ignored (reached end-of-life)
lucid_imagemagick: released (7:6.5.7.8-1ubuntu1.2)
maverick_imagemagick: ignored (reached end-of-life)
natty_imagemagick: released (7:6.6.2.6-1ubuntu4.1)
oneiric_imagemagick: released (8:6.6.0.4-3ubuntu1.1)
precise_imagemagick: released (8:6.6.9.7-5ubuntu3.1)
devel_imagemagick: released (8:6.6.9.7-5ubuntu3.1)