OSVDB ID: 79004 Title: ImageMagick IFD IOP Tag Offset Infinite Loop Image Handling Remote DoS |
Info |
|
|
Dates |
||||
|
|
Description |
ImageMagick contains a flaw that may allow a remote denial of service. The issue is due to an error when parsing an IFD with IOP tag offsets pointing to the start of the IFD, which causes the application to go into an infinite loop resulting in a loss of availability. |
Classification |
Location:
Local / Remote,
Context Dependent
Attack Type: Denial of Service Impact: Loss of Availability Solution: Upgrade Exploit: Exploit Unknown Disclosure: Vendor Verified |
Solution |
Upgrade to version 6.7.5-8 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |