deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-1987
Published: 2012-05-29
Description: Unspecified vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys to (1) cause a denial of service (memory consumption) via a REST request to a stream that triggers a thread block, as demonstrated using CVE-2012-1986 and /dev/random; or (2) cause a denial of service (filesystem consumption) via crafted REST requests that use "a marshaled form of a Puppet::FileBucket::File object" to write to arbitrary file locations.
CVSS Score: 3.5 (LOW)
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079227.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079289.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080003.html
CVE: CVE-2012-1988
Published: 2012-05-29
Description: Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys and file-creation permissions on the puppet master to execute arbitrary commands by creating a file whose full pathname contains shell metacharacters, then performing a filebucket request.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-78
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079227.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079289.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080003.html
CVE: CVE-2012-2951
Published: 2012-05-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-6587.  Reason: This candidate is a duplicate of CVE-2007-6587.  Notes: All CVE users should reference CVE-2007-6587 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2012-2952
Published: 2012-05-29
Description: SQL injection vulnerability in add_ons.php in Jaow 2.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the add_ons parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/82231; http://secunia.com/advisories/49266; http://www.exploit-db.com/exploits/18921
CVE: CVE-2010-5099
Published: 2012-05-30
Description: The fileDenyPattern functionality in the PHP file inclusion protection API in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly filter file types, which allows remote attackers to bypass intended access restrictions and access arbitrary PHP files, as demonstrated using path traversal sequences with %00 null bytes and CVE-2010-3714 to read the TYPO3 encryption key from localconf.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://blog.nibblesec.org/2010/12/typo3-sa-2010-020-typo3-sa-2010-022.html; http://secunia.com/advisories/35770; http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/
CVE: CVE-2012-2488
Published: 2012-05-31
Description: Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service (packet transmission outage) via a crafted packet, aka Bug IDs CSCty94537 and CSCtz62593.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/49329; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120530-iosxr; http://www.securityfocus.com/bid/53728
CVE: CVE-2012-0949
Published: 2012-05-31
Description: The Apport hook in Update Manager as used by Ubuntu 12.04 LTS, 11.10, and 11.04 uploads certain system state archive files when reporting bugs to Launchpad, which allows remote attackers to read repository credentials by viewing a public bug report.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/82020; http://secunia.com/advisories/49230; http://www.securityfocus.com/bid/53605
CVE: CVE-2012-2352
Published: 2012-05-31
Description: The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives via vectors related to the (1) do_arc_manage, (2) do_arc_download, or (3) do_arc_delete functions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/49045; http://secunia.com/advisories/49237; http://www.debian.org/security/2012/dsa-2477
CVE: CVE-2012-0409
Published: 2012-06-01
Description: Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service (agent crash) or possibly execute arbitrary code via crafted packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/archive/1/522835; http://www.securityfocus.com/bid/53682; http://www.securitytracker.com/id?1027100
CVE: CVE-2012-2752
Published: 2012-06-01
Description: Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
CVSS Score: 7.2 (HIGH)
References: http://osvdb.org/82276; http://secunia.com/advisories/49300; http://secunia.com/advisories/49322
CVE: CVE-2012-2944
Published: 2012-06-01
Description: Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (electric-power outage) via a long string containing non-printable characters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://alioth.debian.org/tracker/?func=detail&aid=313636; http://networkupstools.org/docs/user-manual.chunked/apis01.html; http://secunia.com/advisories/49348
CVE: CVE-2012-2947
Published: 2012-06-02
Description: chan_iax2.c in the IAX2 channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1, when a certain mohinterpret setting is enabled, allows remote attackers to cause a denial of service (daemon crash) by placing a call on hold.
CVSS Score: 2.6 (LOW)
CWE: CWE-284
References: http://archives.neohapsis.com/archives/bugtraq/2012-05/0144.html; http://downloads.asterisk.org/pub/security/AST-2012-007.html; http://secunia.com/advisories/49303
CVE: CVE-2012-2948
Published: 2012-06-02
Description: chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by closing a connection in off-hook mode.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://archives.neohapsis.com/archives/bugtraq/2012-05/0145.html; http://downloads.asterisk.org/pub/security/AST-2012-008.html; http://secunia.com/advisories/49303
CVE: CVE-2012-1252
Published: 2012-06-04
Description: Cross-site scripting (XSS) vulnerability in RSSOwl before 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a feed, a different vulnerability than CVE-2006-4760.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN77947437/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000048; http://jvn.jp/en/jp/JVN77947437/index.html
CVE: CVE-2012-1253
Published: 2012-06-04
Description: Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via vectors involving an embedded image attachment.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN21422837/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000050; http://sourceforge.net/projects/roundcubemail/files/roundcubemail/0.7/
CVE: CVE-2012-2630
Published: 2012-06-04
Description: The Puella Magi Madoka Magica iP application 1.05 and earlier for Android places cleartext Twitter credentials in a log file, which allows remote attackers to obtain sensitive information via a crafted application.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-255
References: http://jvn.jp/en/jp/JVN23328321/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000054; http://jvn.jp/en/jp/JVN23328321/index.html
CVE: CVE-2012-1250
Published: 2012-06-04
Description: Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain administrative privileges and modify settings via vectors related to PPPoE authentication.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://jvn.jp/en/jp/JVN85934986/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000051; http://secunia.com/advisories/49289
CVE: CVE-2012-1251
Published: 2012-06-04
Description: Opera before 9.63 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-310
References: http://jvn.jp/en/jp/JVN39707339/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000049; http://www.opera.com/docs/changelogs/mac/963/
CVE: CVE-2012-1254
Published: 2012-06-04
Description: Cross-site scripting (XSS) vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN29083866/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000052; http://jvn.jp/en/jp/JVN29083866/index.html
CVE: CVE-2012-1255
Published: 2012-06-04
Description: SQL injection vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://jvn.jp/en/jp/JVN97995841/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000053; http://jvn.jp/en/jp/JVN97995841/index.html
CVE: CVE-2011-2082
Published: 2012-06-04
Description: The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update the password-hash algorithm for disabled user accounts, which makes it easier for context-dependent attackers to determine cleartext passwords, and possibly use these passwords after accounts are re-enabled, via a brute-force attack on the database.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-0009.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
CVE: CVE-2011-2083
Published: 2012-06-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
CVE: CVE-2011-2084
Published: 2012-06-04
Description: Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to read (1) hashes of former passwords and (2) ticket correspondence history by leveraging access to a privileged account.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
CVE: CVE-2011-2085
Published: 2012-06-04
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
CVE: CVE-2011-4458
Published: 2012-06-04
Description: Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-5092 and CVE-2011-5093.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
CVE: CVE-2011-4459
Published: 2012-06-04
Description: Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a group membership.
CVSS Score: 3.5 (LOW)
CWE: CWE-264
References: http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
CVE: CVE-2011-4460
Published: 2012-06-04
Description: SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a privileged account.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
CVE: CVE-2011-5092
Published: 2012-06-04
Description: Best Practical Solutions RT 3.8.x before 3.8.12 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code and gain privileges via unspecified vectors, a different vulnerability than CVE-2011-4458 and CVE-2011-5093.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
CVE: CVE-2011-5093
Published: 2012-06-04
Description: Best Practical Solutions RT 4.x before 4.0.6 does not properly implement the DisallowExecuteCode option, which allows remote authenticated users to bypass intended access restrictions and execute arbitrary code by leveraging access to a privileged account, a different vulnerability than CVE-2011-4458 and CVE-2011-5092.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html; http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
CVE: CVE-2012-0060
Published: 2012-06-04
Description: RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html
CVE: CVE-2012-0061
Published: 2012-06-04
Description: The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html
CVE: CVE-2012-0815
Published: 2012-06-04
Description: The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077960.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078819.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078907.html
CVE: CVE-2012-0862
Published: 2012-06-04
Description: builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote attackers to bypass intended access restrictions via a request to tcpmux port 1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081428.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081446.html; http://rhn.redhat.com/errata/RHSA-2013-1302.html
CVE: CVE-2012-0944
Published: 2012-06-04
Description: Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote attackers to install arbitrary packages via a man-in-the-middle attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: http://secunia.com/advisories/48688; http://ubuntu.com/usn/usn-1414-1; http://www.osvdb.org/80887
CVE: CVE-2012-1173
Published: 2012-06-04
Description: Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://bugzilla.maptools.org/attachment.cgi?id=477&action=diff; http://bugzilla.maptools.org/show_bug.cgi?id=2369; http://home.gdal.org/private/zdi-can-1221/zdi-can-1221.txt
CVE: CVE-2012-1667
Published: 2012-06-05
Description: ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.
CVSS Score: 8.5 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00010.html
CVE: CVE-2012-0247
Published: 2012-06-05
Description: ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2012-0544.html; http://rhn.redhat.com/errata/RHSA-2012-0545.html; http://secunia.com/advisories/47926
CVE: CVE-2012-0248
Published: 2012-06-05
Description: ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://rhn.redhat.com/errata/RHSA-2012-0544.html; http://rhn.redhat.com/errata/RHSA-2012-0545.html; http://secunia.com/advisories/47926
CVE: CVE-2012-0259
Published: 2012-06-05
Description: The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (crash) via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html; http://rhn.redhat.com/errata/RHSA-2012-0544.html; http://secunia.com/advisories/48679
CVE: CVE-2012-0260
Published: 2012-06-05
Description: The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (memory consumption) via a JPEG image with a crafted sequence of restart markers.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html; http://rhn.redhat.com/errata/RHSA-2012-0544.html; http://rhn.redhat.com/errata/RHSA-2012-0545.html
CVE: CVE-2012-0805
Published: 2012-06-05
Description: Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit or (4) select.offset function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://rhn.redhat.com/errata/RHSA-2012-0369.html; http://secunia.com/advisories/48327; http://secunia.com/advisories/48328
CVE: CVE-2012-0920
Published: 2012-06-05
Description: Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to execute arbitrary code and bypass command restrictions via multiple crafted command requests, related to "channels concurrency."
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://matt.ucc.asn.au/dropbear/CHANGES; http://secunia.com/advisories/48147; http://secunia.com/advisories/48929
CVE: CVE-2012-1185
Published: 2012-06-05
Description: Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset value in the ResolutionUnit tag in the EXIF IFD0 of an image.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0247.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html; http://secunia.com/advisories/47926; http://secunia.com/advisories/48974
CVE: CVE-2012-1186
Published: 2012-06-05
Description: Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted IOP tag offsets in the IFD in an image.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0248.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html; http://secunia.com/advisories/47926; http://secunia.com/advisories/48974
CVE: CVE-2012-1610
Published: 2012-06-05
Description: Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of service (out-of-bounds read) via a large component count for certain EXIF tags in a JPEG image.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0259.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-updates/2012-06/msg00001.html; http://secunia.com/advisories/48974; http://secunia.com/advisories/49043