CVE-2014-2030

HIGH 8.8CVE-2014-2030 · Published 06/02/2020 · updated 17/06/2026

Package	Affected versions	Patched versions
imagemagick imagemagick	`= 6.8.8-5`	No fix yet

Description

Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick, possibly 6.8.8-5, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PSD image, involving the L%06ld string, a different vulnerability than CVE-2014-1947.

References

lists.opensuse.org/opensuse-updates/2014-03/msg00032.html · Mailing List
lists.opensuse.org/opensuse-updates/2014-03/msg00039.html · Mailing List
ubuntu.com/usn/usn-2132-1 · Third Party Advisory
openwall.com/lists/oss-security/2014/02/12/2 · Mailing List
openwall.com/lists/oss-security/2014/02/13/5 · Mailing List
openwall.com/lists/oss-security/2014/02/19/13 · Mailing List
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
web.archive.org/web/20090120112751/http://trac.imagemagick.org/changeset/13736 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free