CVE-2014-1958: Buffer Overflow
Buffer overflow in the DecodePSDPixels function in coders/psd.c in ImageMagick before 6.8.8-5 might allow remote attackers to execute arbitrary code via a crafted PSD image, involving the L%06ld string, a different vulnerability than CVE-2014-2030.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2014-1958?
CVE-2014-1958 is a vulnerability in the DecodePSDPixels function in ImageMagick before 6.8.8-5 that could allow remote attackers to execute arbitrary code via a crafted PSD image.
How does CVE-2014-1958 affect ImageMagick?
CVE-2014-1958 affects ImageMagick versions before 6.8.8-5, allowing remote attackers to execute arbitrary code.
What is the severity of CVE-2014-1958?
The severity of CVE-2014-1958 is high, with a severity value of 8.8.
How do I fix CVE-2014-1958?
To fix CVE-2014-1958, you should update ImageMagick to version 6.8.8-5 or later.
Are there any references for CVE-2014-1958?
Yes, you can find more information about CVE-2014-1958 at the following references: http://lists.opensuse.org/opensuse-updates/2014-03/msg00032.html, http://lists.opensuse.org/opensuse-updates/2014-03/msg00039.html, http://trac.imagemagick.org/changeset/14801