CVE-2014-1947
Fixed in a distro release EPSS 7%
Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of layers in a PSD image, involving the L%02ld string, a different vulnerability than CVE-2014-2030.
Products: imagemagick, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | graphicsmagick | 1.3.20-1 |
| Debian 12 | imagemagick | 8:6.7.7.10+dfsg-1 |
| Debian 13 | graphicsmagick | 1.3.20-1 |
| Debian 13 | imagemagick | 8:6.7.7.10+dfsg-1 |
| Debian 14 | graphicsmagick | 1.3.20-1 |
| Debian 14 | imagemagick | 8:6.7.7.10+dfsg-1 |
| Debian 6.0 | imagemagick | 8:6.6.0.4-3+squeeze4 |
| Debian 7 | imagemagick | 8:6.7.7.10-5+deb7u3 |