Every CVE Search/ Get API key

CVE-2012-0248

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite...

5.5 MediumFix available

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

2.10%Down 1.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.5

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.

Record
CVE-2012-0248
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-835
Updated
2026-11-02
CVE List No score

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.

Record
CVE-2012-0248
Updated
2026-11-02
EUVDEUVD-2012-0284 No score

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.

Record
EUVD-2012-0284
Updated
2026-11-03
GitHub AdvisoriesGHSA-jxh3-f5j5-g9vq 5.5

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite...

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.

Record
GHSA-jxh3-f5j5-g9vq
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-835
Updated
2026-11-02
OSV 5.5

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.

Record
CVE-2012-0248
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2012-0248 5.5

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.

Record
DEBIAN-CVE-2012-0248
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2024:10040-1 No score

ImageMagick-6.9.6.6-1.1 on GA media

These are all security issues fixed in the ImageMagick-6.9.6.6-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10040-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
imagemagick
Debian:12
 before 8:6.6.9.7-6
8:6.6.9.7-6
imagemagick
Debian:13
 before 8:6.6.9.7-6
8:6.6.9.7-6
imagemagick
Debian:14
 before 8:6.6.9.7-6
8:6.6.9.7-6
imagemagick
Debian:6.0
 before 8:6.6.0.4-3+squeeze1, plus listed versions
8:6.6.0.4-3
8:6.6.0.4-3+squeeze1
ImageMagick
Red Hat:enterprise_linux:6::client
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-c++
Red Hat:enterprise_linux:6::client
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-c++-devel
Red Hat:enterprise_linux:6::client
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-devel
Red Hat:enterprise_linux:6::client
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-doc
Red Hat:enterprise_linux:6::client
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
Show 37 moreShow less
Affected packages
PackageAffectedFixed
ImageMagick-perl
Red Hat:enterprise_linux:6::client
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick
Red Hat:enterprise_linux:6::computenode
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-c++
Red Hat:enterprise_linux:6::computenode
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-c++-devel
Red Hat:enterprise_linux:6::computenode
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-devel
Red Hat:enterprise_linux:6::computenode
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-doc
Red Hat:enterprise_linux:6::computenode
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-perl
Red Hat:enterprise_linux:6::computenode
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick
Red Hat:enterprise_linux:6::server
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-c++
Red Hat:enterprise_linux:6::server
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-c++-devel
Red Hat:enterprise_linux:6::server
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-devel
Red Hat:enterprise_linux:6::server
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-doc
Red Hat:enterprise_linux:6::server
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-perl
Red Hat:enterprise_linux:6::server
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick
Red Hat:enterprise_linux:6::workstation
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-c++
Red Hat:enterprise_linux:6::workstation
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-c++-devel
Red Hat:enterprise_linux:6::workstation
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-devel
Red Hat:enterprise_linux:6::workstation
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-doc
Red Hat:enterprise_linux:6::workstation
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick-perl
Red Hat:enterprise_linux:6::workstation
 before 0:6.5.4.7-6.el6_2
0:6.5.4.7-6.el6_2
ImageMagick
Red Hat:enterprise_linux:5::client
 before 0:6.2.8.0-15.el5_8
0:6.2.8.0-15.el5_8
ImageMagick-c++
Red Hat:enterprise_linux:5::client
 before 0:6.2.8.0-15.el5_8
0:6.2.8.0-15.el5_8
ImageMagick-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:6.2.8.0-15.el5_8
0:6.2.8.0-15.el5_8
ImageMagick-perl
Red Hat:enterprise_linux:5::client
 before 0:6.2.8.0-15.el5_8
0:6.2.8.0-15.el5_8
ImageMagick
Red Hat:enterprise_linux:5::client_workstation
 before 0:6.2.8.0-15.el5_8
0:6.2.8.0-15.el5_8
ImageMagick-c++-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:6.2.8.0-15.el5_8
0:6.2.8.0-15.el5_8
ImageMagick-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:6.2.8.0-15.el5_8
0:6.2.8.0-15.el5_8
ImageMagick-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:6.2.8.0-15.el5_8
0:6.2.8.0-15.el5_8
ImageMagick
Red Hat:enterprise_linux:5::server
 before 0:6.2.8.0-15.el5_8
0:6.2.8.0-15.el5_8
ImageMagick-c++
Red Hat:enterprise_linux:5::server
 before 0:6.2.8.0-15.el5_8
0:6.2.8.0-15.el5_8
ImageMagick-c++-devel
Red Hat:enterprise_linux:5::server
 before 0:6.2.8.0-15.el5_8
0:6.2.8.0-15.el5_8
ImageMagick-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:6.2.8.0-15.el5_8
0:6.2.8.0-15.el5_8
ImageMagick-devel
Red Hat:enterprise_linux:5::server
 before 0:6.2.8.0-15.el5_8
0:6.2.8.0-15.el5_8
ImageMagick-perl
Red Hat:enterprise_linux:5::server
 before 0:6.2.8.0-15.el5_8
0:6.2.8.0-15.el5_8
ImageMagick
openSUSE:Tumbleweed
 before 6.9.6.6-1.1
6.9.6.6-1.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-0248 is a medium vulnerability (CVSS 5.5) in Imagemagick, published March 6, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.10%, the 81st percentile. Fixed in imagemagick 8:6.6.9.7-6.

References

Show 51 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open