CVE-2012-0247
ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory...
CVE-2012-0247 is a high vulnerability (CVSS 8.8) in Imagemagick, published March 6, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.77%, the 89th percentile. Fixed in imagemagick 8:6.6.9.7-6.
ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
8.8
ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image.
- Record
CVE-2012-0247- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image.
- Record
CVE-2012-0247- Updated
- 2026-11-02
EUVDEUVD-2012-0283 No score
ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image.
- Record
EUVD-2012-0283- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v335-7263-364v
8.8
ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory...
ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image.
- Record
GHSA-v335-7263-364v- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
OSV
8.8
ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image.
- Record
CVE-2012-0247- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-0247
8.8
ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image.
- Record
DEBIAN-CVE-2012-0247- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10040-1 No score
ImageMagick-6.9.6.6-1.1 on GA media
These are all security issues fixed in the ImageMagick-6.9.6.6-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10040-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
imagemagickDebian:12 |
before 8:6.6.9.7-6 | 8:6.6.9.7-6 |
imagemagickDebian:13 |
before 8:6.6.9.7-6 | 8:6.6.9.7-6 |
imagemagickDebian:14 |
before 8:6.6.9.7-6 | 8:6.6.9.7-6 |
imagemagickDebian:6.0 |
before 8:6.6.0.4-3+squeeze1, plus listed versions 8:6.6.0.4-3 |
8:6.6.0.4-3+squeeze1 |
ImageMagickRed Hat:enterprise_linux:6::client |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-c++Red Hat:enterprise_linux:6::client |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-debuginfoRed Hat:enterprise_linux:6::client |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-c++-develRed Hat:enterprise_linux:6::client |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-develRed Hat:enterprise_linux:6::client |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-docRed Hat:enterprise_linux:6::client |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
Show 37 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ImageMagick-perlRed Hat:enterprise_linux:6::client |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagickRed Hat:enterprise_linux:6::computenode |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-c++Red Hat:enterprise_linux:6::computenode |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-c++-develRed Hat:enterprise_linux:6::computenode |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-develRed Hat:enterprise_linux:6::computenode |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-docRed Hat:enterprise_linux:6::computenode |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-perlRed Hat:enterprise_linux:6::computenode |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagickRed Hat:enterprise_linux:6::server |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-c++Red Hat:enterprise_linux:6::server |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-debuginfoRed Hat:enterprise_linux:6::server |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-c++-develRed Hat:enterprise_linux:6::server |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-develRed Hat:enterprise_linux:6::server |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-docRed Hat:enterprise_linux:6::server |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-perlRed Hat:enterprise_linux:6::server |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagickRed Hat:enterprise_linux:6::workstation |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-c++Red Hat:enterprise_linux:6::workstation |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-c++-develRed Hat:enterprise_linux:6::workstation |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-develRed Hat:enterprise_linux:6::workstation |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-docRed Hat:enterprise_linux:6::workstation |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagick-perlRed Hat:enterprise_linux:6::workstation |
before 0:6.5.4.7-6.el6_2 | 0:6.5.4.7-6.el6_2 |
ImageMagickRed Hat:enterprise_linux:5::client |
before 0:6.2.8.0-15.el5_8 | 0:6.2.8.0-15.el5_8 |
ImageMagick-c++Red Hat:enterprise_linux:5::client |
before 0:6.2.8.0-15.el5_8 | 0:6.2.8.0-15.el5_8 |
ImageMagick-debuginfoRed Hat:enterprise_linux:5::client |
before 0:6.2.8.0-15.el5_8 | 0:6.2.8.0-15.el5_8 |
ImageMagick-perlRed Hat:enterprise_linux:5::client |
before 0:6.2.8.0-15.el5_8 | 0:6.2.8.0-15.el5_8 |
ImageMagickRed Hat:enterprise_linux:5::client_workstation |
before 0:6.2.8.0-15.el5_8 | 0:6.2.8.0-15.el5_8 |
ImageMagick-c++-develRed Hat:enterprise_linux:5::client_workstation |
before 0:6.2.8.0-15.el5_8 | 0:6.2.8.0-15.el5_8 |
ImageMagick-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:6.2.8.0-15.el5_8 | 0:6.2.8.0-15.el5_8 |
ImageMagick-develRed Hat:enterprise_linux:5::client_workstation |
before 0:6.2.8.0-15.el5_8 | 0:6.2.8.0-15.el5_8 |
ImageMagickRed Hat:enterprise_linux:5::server |
before 0:6.2.8.0-15.el5_8 | 0:6.2.8.0-15.el5_8 |
ImageMagick-c++Red Hat:enterprise_linux:5::server |
before 0:6.2.8.0-15.el5_8 | 0:6.2.8.0-15.el5_8 |
ImageMagick-c++-develRed Hat:enterprise_linux:5::server |
before 0:6.2.8.0-15.el5_8 | 0:6.2.8.0-15.el5_8 |
ImageMagick-debuginfoRed Hat:enterprise_linux:5::server |
before 0:6.2.8.0-15.el5_8 | 0:6.2.8.0-15.el5_8 |
ImageMagick-develRed Hat:enterprise_linux:5::server |
before 0:6.2.8.0-15.el5_8 | 0:6.2.8.0-15.el5_8 |
ImageMagick-perlRed Hat:enterprise_linux:5::server |
before 0:6.2.8.0-15.el5_8 | 0:6.2.8.0-15.el5_8 |
ImageMagickopenSUSE:Tumbleweed |
before 6.9.6.6-1.1 | 6.9.6.6-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
gentoo.org/security/en/glsa/glsa-201203-09.xml
imagemagick.org/discourse-server/viewtopic.php?f=4&t=20286
secunia.com/advisories/49068
cert.fi/en/reports/2012/vulnerability595210.html
secunia.com/advisories/48259
secunia.com/advisories/49043
Show 50 moreShow less
secunia.com/advisories/49063
debian.org/security/2012/dsa-2427
rhn.redhat.com/errata/RHSA-2012-0544.html
secunia.com/advisories/47926
ubuntu.com/usn/usn-1435-1
secunia.com/advisories/48247
osvdb.org/79003
securitytracker.com/id?1027032
rhn.redhat.com/errata/RHSA-2012-0545.html
nvd.nist.gov/vuln/detail/CVE-2012-0247
github.com/advisories/GHSA-v335-7263-364v
security-tracker.debian.org/tracker/CVE-2012-0247
access.redhat.com/errata/RHSA-2012:0544
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=652860
bugzilla.redhat.com/show_bug.cgi?id=789443
bugzilla.redhat.com/show_bug.cgi?id=807993
bugzilla.redhat.com/show_bug.cgi?id=807994
bugzilla.redhat.com/show_bug.cgi?id=807997
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0544.json
access.redhat.com/security/cve/CVE-2010-4167
cve.org/CVERecord?id=CVE-2010-4167
nvd.nist.gov/vuln/detail/CVE-2010-4167
access.redhat.com/security/cve/CVE-2012-0247
cve.org/CVERecord?id=CVE-2012-0247
access.redhat.com/security/cve/CVE-2012-0248
cve.org/CVERecord?id=CVE-2012-0248
nvd.nist.gov/vuln/detail/CVE-2012-0248
access.redhat.com/security/cve/CVE-2012-0259
cve.org/CVERecord?id=CVE-2012-0259
nvd.nist.gov/vuln/detail/CVE-2012-0259
access.redhat.com/security/cve/CVE-2012-0260
cve.org/CVERecord?id=CVE-2012-0260
nvd.nist.gov/vuln/detail/CVE-2012-0260
access.redhat.com/security/cve/CVE-2012-1798
cve.org/CVERecord?id=CVE-2012-1798
nvd.nist.gov/vuln/detail/CVE-2012-1798
access.redhat.com/errata/RHSA-2012:0545
rhn.redhat.com/errata/RHSA-2012-0301.html
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0545.json
suse.com/security/cve/CVE-2012-0247
suse.com/security/cve/CVE-2012-0248
suse.com/security/cve/CVE-2012-1185
suse.com/security/cve/CVE-2012-1186
suse.com/security/cve/CVE-2016-3714
suse.com/security/cve/CVE-2016-3715
suse.com/security/cve/CVE-2016-3716
suse.com/security/cve/CVE-2016-3717
suse.com/security/cve/CVE-2016-3718
suse.com/security/cve/CVE-2016-5118