CVE-2014-2030: Buffer Overflow
Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick, possibly 6.8.8-5, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PSD image, involving the L%06ld string, a different vulnerability than CVE-2014-1947.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2014-2030?
CVE-2014-2030 is a stack-based buffer overflow vulnerability in the WritePSDImage function in coders/psd.c in ImageMagick.
What is the severity of CVE-2014-2030?
The severity of CVE-2014-2030 is high with a CVSS score of 8.8.
Which software versions are affected by CVE-2014-2030?
ImageMagick version 6.8.8-5 and Ubuntu Linux versions 12.04, 12.10, and 13.10 are affected by CVE-2014-2030.
How can a remote attacker exploit CVE-2014-2030?
A remote attacker can exploit CVE-2014-2030 by sending a crafted PSD image, involving the L%06ld string, to the target system.
Are there any known fixes for CVE-2014-2030?
Yes, fixes for CVE-2014-2030 are available. Please refer to the provided references for more information.