CVE-2012-0260

· MEDIUMModified

← All CVEs

CVSS v3.1

6.5

EPSS

2.36%

Published

Jun 5, 2012

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (memory consumption) via a JPEG image with a crafted sequence of restart markers.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-400

Affected Products (17)

imagemagick · imagemagick (up to 6.7.6-3)vulnerable

canonical · ubuntu_linuxvulnerable

debian · debian_linuxvulnerable

redhat · storagevulnerable

redhat · enterprise_linux_ausvulnerable

redhat · enterprise_linux_desktopvulnerable

redhat · enterprise_linux_eusvulnerable

redhat · enterprise_linux_servervulnerable

redhat · enterprise_linux_server_eusvulnerable

redhat · enterprise_linux_workstationvulnerable

opensuse · opensusevulnerable

References (20)

http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-0544.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-0545.html

Third Party Advisory

http://secunia.com/advisories/48974

Broken Link

http://secunia.com/advisories/49063

Broken Link

http://secunia.com/advisories/49068

Broken Link

http://secunia.com/advisories/49317

Broken Link

http://secunia.com/advisories/55035

Broken Link

http://secunia.com/advisories/57224

Broken Link

http://www.cert.fi/en/reports/2012/vulnerability635606.html

Broken Link

http://www.debian.org/security/2012/dsa-2462

Third Party Advisory

http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629

Issue TrackingPatchVendor Advisory

http://www.osvdb.org/81022

Broken Link

http://www.securityfocus.com/bid/52898

PatchThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1027032

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2132-1

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/74658

Third Party AdvisoryVDB Entry

http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-0544.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-0545.html

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs