CVE-2014-2030
High · 8.8CVSS
8.8
EPSS
11.1%
Published
Feb 6, 2020
CISA due date
—
The record
Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick, possibly 6.8.8-5, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PSD image, involving the L%06ld string, a different vulnerability than CVE-2014-1947.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | imagemagick | 0 | 8:6.7.7.10+dfsg-1 |
| Debian:12 | imagemagick | 0 | 8:6.7.7.10+dfsg-1 |
| Debian:13 | imagemagick | 0 | 8:6.7.7.10+dfsg-1 |
| Debian:6.0 | imagemagick | 0 | 8:6.6.0.4-3+squeeze4 |
| Debian:7 | imagemagick | 0 | 8:6.7.7.10-5+deb7u3 |
| Mageia:3 | imagemagick | 0 | 6.8.1.1-2.1.mga3 |
| Mageia:4 | imagemagick | 0 | 6.8.7.0-2.1.mga4 |
Related vulnerabilities
- CVE-2017-15277 ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the… Also affects imagemagick
- CVE-2017-14528 The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect… Also affects imagemagick
- CVE-2017-13144 In ImageMagick before 6.9.7-10, there is a crash (rather than a "width or height exceeds… Also affects imagemagick
- CVE-2017-10928 In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in… Also affects imagemagick
- CVE-2014-8354 The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote… Also affects imagemagick
- CVE-2017-7606 coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of… Also affects imagemagick
- CVE-2017-6498 An issue was discovered in ImageMagick 6.9.7. Also affects imagemagick
- CVE-2016-10062 The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return… Also affects imagemagick