Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-1186
5.5
MEDIUMCVSS v3
Published
June 5, 2012
CVSS v2
4.3 MEDIUM
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted IOP tag offsets in the IFD in an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0248.
NPM