Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2012-0260

21
FAUCET Score

CVE-2012-0260 describes a denial-of-service vulnerability in ImageMagick versions prior to 6.7.6-3, specifically within the JPEGWarningHandler function, affecting products like Debian, Red Hat, and openSUSE. An unauthenticated remote attacker can trigger excessive memory consumption by providing a specially crafted JPEG image containing an unusual sequence of restart markers. While the attack complexity is low and user interaction is required (opening the malicious image), the primary impact is a high availability compromise. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decade-old vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
< 6.7.6-3CPE matchmatch criteria
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
12.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
12.10CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
13.10CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*
6.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

6.5MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
2.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
2.36%
Probability of exploitation in next 30 days
EPSS Percentile
82.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0236 is in the 91st percentile among its peer group of 26,221 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: ImageMagick-0:6.2.8.0-15.el5_8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: ImageMagick-0:6.5.4.7-6.el6_2
View patch

Vendor Advisories (1)

redhatCVE-2012-0260Low

ImageMagick: excessive CPU use DoS by processing JPEG images with crafted restart markers

Mar 28, 2012

References

lists.opensuse.org / opensuse-updates/2012-06/msg00001.html
Mailing ListThird Party Advisory
rhn.redhat.com / errata/RHSA-2012-0544.html
Third Party Advisory
rhn.redhat.com / errata/RHSA-2012-0545.html
Third Party Advisory
secunia.com / advisories/48974
Broken Link
secunia.com / advisories/49063
Broken Link
secunia.com / advisories/49068
Broken Link
secunia.com / advisories/49317
Broken Link
secunia.com / advisories/55035
Broken Link
secunia.com / advisories/57224
Broken Link
exchange.xforce.ibmcloud.com / vulnerabilities/74658
Third Party AdvisoryVDB Entry
cert.fi / en/reports/2012/vulnerability635606.html
Broken Link
debian.org / security/2012/dsa-2462
Third Party Advisory
imagemagick.org / discourse-server/viewtopic.php
Issue TrackingPatchVendor Advisory
osvdb.org / 81022
Broken Link
securityfocus.com / bid/52898
PatchThird Party AdvisoryVDB Entry
securitytracker.com / id
Third Party AdvisoryVDB Entry
ubuntu.com / usn/USN-2132-1
Third Party Advisory