The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted EXIF IFD in a TIFF image.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ImageMagick-develUpgrade ImageMagickUpgrade ImageMagick-perlUpgrade ImageMagick-c++-develUpgrade ImageMagick-docUpgrade ImageMagick-c++ | Dec 1, 2016 | Jun 5, 2012 |
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Jun 5, 2012 |
| Freebsd | — | Upgrade ImageMagick-nox11Upgrade ImageMagick | Dec 10, 2025 | Jun 14, 2012 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.8.3.5-0.175.1.11.0.3.0 on Solaris 11.1Upgrade image/imagemagick to version 6.9.5.0-0.175.3.11.0.5.0 on Solaris 11.3 | May 29, 2017 | Jun 5, 2012 |
| Oracle_linux | — | Upgrade ImageMagick-perlUpgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-doc | Oct 16, 2024 | Jun 5, 2012 |
| Suse | — | Upgrade libMagickCore1Upgrade libMagick++-develUpgrade perl-PerlMagickUpgrade libMagickCore1-32bitUpgrade libMagickWand1Upgrade ImageMagickUpgrade libMagickWand1-32bitUpgrade libMagick++1Upgrade ImageMagick-devel | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libmagick++3Upgrade libmagick++2Upgrade imagemagickUpgrade libmagick++4 | Nov 8, 2024 | Jun 5, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub