The host is installed with ImageMagick and is prone to integer overflow Vulnerability.

Successful exploitation will allow an attacker to cause denial of service condition result in loss of availability for the application. Impact Level: Application

Upgrade to ImageMagick version 6.7.6-4 or later. http://www.imagemagick.org/script/download.php

Integer overflow error occurs due to improper sanitation of user supplied input when by a crafted JPEG EXIF tag with an excessive components count to the 'GetEXIFProperty()' and 'SyncImageProfiles()' functions in magick/profile.c

ImageMagick version before 6.7.6-4 on Windows.

• http://seclists.org/oss-sec/2012/q2/19
• http://www.cert.fi/en/reports/2012/vulnerability635606.html
• http://www.osvdb.com/81024

---

Updated on 2015-03-25