CVE-2012-1798

MediumCVSS 6.5/10Last modified Jun 16, 2026

Description

The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted EXIF IFD in a TIFF image.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.htmlMailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0544.htmlThird Party Advisory
http://secunia.com/advisories/48974Not Applicable
http://secunia.com/advisories/49063Not Applicable
http://secunia.com/advisories/49068Not Applicable
http://secunia.com/advisories/49317Not Applicable
http://secunia.com/advisories/55035Not Applicable
http://www.debian.org/security/2012/dsa-2462Third Party Advisory
http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629Patch, Vendor Advisory
http://www.osvdb.org/81023Broken Link
http://www.securityfocus.com/bid/52898Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1027032Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/74659Third Party Advisory, VDB Entry
http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.htmlMailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0544.htmlThird Party Advisory
http://secunia.com/advisories/48974Not Applicable
http://secunia.com/advisories/49063Not Applicable
http://secunia.com/advisories/49068Not Applicable
http://secunia.com/advisories/49317Not Applicable
http://secunia.com/advisories/55035Not Applicable
http://www.debian.org/security/2012/dsa-2462Third Party Advisory
http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629Patch, Vendor Advisory
http://www.osvdb.org/81023Broken Link
http://www.securityfocus.com/bid/52898Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1027032Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/74659Third Party Advisory, VDB Entry

Timeline

Published: Jun 5, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-179910.0The web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 does not limit CVE-2012-18006.1Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612 V2,CVE-2012-18017.7Multiple stack-based buffer overflows in (1) COM and (2) ActiveX controls in ABB WebWare Server, WebWare SDK, Interlink Module, S4 OPC Serve CVE-2012-18027.8Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before 3.7.1, X308-2M before 3.7.2, CVE-2012-18038.5RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the b CVE-2012-18047.8The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption)CVE-2012-180510.0Buffer overflow in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 CVE-2012-18067.5The ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 supports a maximum CVE-2012-18074.3Cross-site scripting (XSS) vulnerability in the web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-E CVE-2012-180810.0The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 d CVE-2012-18095.0The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 a CVE-2012-18105.0EOSCoreScada.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service (daemon restart) by sending data t