CVE-2014-2030 Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick, possibly 6.8.8-5, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary....
HighCVSS 8.8
EPSS 11.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick, possibly 6.8.8-5, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PSD image, involving the L%06ld string, a different vulnerability than CVE-2014-1947.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/imagemagick(Debian:12) | < 8:6.7.7.10+dfsg-1 | 8:6.7.7.10+dfsg-1 |
| debian/imagemagick(Debian:13) | < 8:6.7.7.10+dfsg-1 | 8:6.7.7.10+dfsg-1 |
| debian/imagemagick(Debian:14) | < 8:6.7.7.10+dfsg-1 | 8:6.7.7.10+dfsg-1 |
| ImageMagick | = 6.8.8-5 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 12.10 | No fix listed |
| Canonical Ubuntu Linux | = 13.10 | No fix listed |
| opensuse | = 11.4 | No fix listed |
| opensuse | = 12.3 | No fix listed |
| opensuse | = 13.1 | No fix listed |
References
- Debian Security Tracker CVE-2014-2030 vendor-advisory
- lists.opensuse.org mailing-list third-party-advisory
- lists.opensuse.org mailing-list third-party-advisory
- ubuntu.com third-party-advisory
- www.openwall.com mailing-list patch third-party-advisory
- www.openwall.com mailing-list third-party-advisory
- www.openwall.com mailing-list third-party-advisory
- bugzilla.redhat.com issue-tracking patch third-party-advisory
- web.archive.org patch third-party-advisory
- bugs.debian.org issue-tracking