Two vulnerabilities have been reported in ImageMagick, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

1) An error when parsing offset and count values within the ResolutionUnit tag in EXIF IFD0 can be exploited to corrupt memory via a specially crafted image.

Successful exploitation of this vulnerability may allow execution of arbitrary code.

2) An error when parsing an IFD with IOP tag offsets pointing to the start of the IFD can be exploited to cause an infinite loop via a specially crafted image.

The vulnerabilities are reported in versions prior to 6.7.5-8.

Solution
Update to version 6.7.5-8.

Provided and/or discovered by
The vendor credits Mr. Joonas Kuorilehto and Mr. Aleksis Kauppinen, Codenomicon CROSS project.

Changelog
Further details available in Customer Area

Original Advisory
http://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=20286

Deep Links
Links available in Customer Area