CVE-2012-0259

The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (crash) via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read.

• CWE-125

• http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0544.htmlThird Party Advisory
• http://secunia.com/advisories/48679Broken Link
• http://secunia.com/advisories/48974Broken Link
• http://secunia.com/advisories/49043Broken Link
• http://secunia.com/advisories/49063Broken Link
• http://secunia.com/advisories/49317Broken Link
• http://secunia.com/advisories/55035Broken Link
• http://ubuntu.com/usn/usn-1435-1Third Party Advisory
• http://www.cert.fi/en/reports/2012/vulnerability635606.htmlBroken Link
• http://www.debian.org/security/2012/dsa-2462Third Party Advisory
• http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629Issue Tracking, Patch, Vendor Advisory
• http://www.osvdb.org/81021Broken Link
• http://www.securityfocus.com/bid/52898Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1027032Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0259Issue Tracking, Patch, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74657Third Party Advisory, VDB Entry
• http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0544.htmlThird Party Advisory
• http://secunia.com/advisories/48679Broken Link
• http://secunia.com/advisories/48974Broken Link
• http://secunia.com/advisories/49043Broken Link
• http://secunia.com/advisories/49063Broken Link
• http://secunia.com/advisories/49317Broken Link
• http://secunia.com/advisories/55035Broken Link
• http://ubuntu.com/usn/usn-1435-1Third Party Advisory
• http://www.cert.fi/en/reports/2012/vulnerability635606.htmlBroken Link
• http://www.debian.org/security/2012/dsa-2462Third Party Advisory
• http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20629Issue Tracking, Patch, Vendor Advisory
• http://www.osvdb.org/81021Broken Link
• http://www.securityfocus.com/bid/52898Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1027032Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0259Issue Tracking, Patch, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74657Third Party Advisory, VDB Entry

Published

Jun 5, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-0253Multiple cross-site scripting (XSS) vulnerabilities in Deman…
• CVE-2012-0254Stack-based buffer overflow in the HMIWeb Browser HSCDSPRend…
• CVE-2012-0255The BGP implementation in bgpd in Quagga before 0.99.20.1 do…
• CVE-2012-0256Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x…
• CVE-2012-0257Heap-based buffer overflow in the WWCabFile ActiveX componen…
• CVE-2012-0258Heap-based buffer overflow in the WWCabFile ActiveX componen…
• CVE-2012-0260The JPEGWarningHandler function in coders/jpeg.c in ImageMag…6.5
• CVE-2012-0261license.php in system-portal before 1.6.2 in op5 Monitor and…
• CVE-2012-0262op5config/welcome in system-op5config before 2.0.3 in op5 Mo…
• CVE-2012-0263monitor/index.php in op5 Monitor and op5 Appliance before 5.…
• CVE-2012-0264op5 Monitor and op5 Appliance before 5.5.0 do not properly m…
• CVE-2012-0265Stack-based buffer overflow in Apple QuickTime before 7.7.2 …