CVE:CVE-2012-0259
CNNVD:CNNVD-201204-028
ImageMagick 6.7.6-3之前版本的magick/property.c中的GetEXIFProperty函数中存在漏洞。远程攻击者可利用该漏洞借助在JPEG文件中EXIF Xresolution标签的组件计数为零的值，导致拒绝服务（崩溃），引发越界读取。
solution:Upgrade imagemagick imagemagick to a higher version than 6.7.6-3,and avoid the version (,6.7.6-3); Upgrade debian debian_linux to a higher version than 6.0,and avoid the version 6.0; Upgrade canonical ubuntu_linux to a higher version than 10.04,11.04,11.10,12.04,and avoid the version 10.04,11.04,11.10,12.04; Upgrade opensuse opensuse to a higher version than 11.4,12.1,and avoid the version 11.4,12.1