First published: Tue Jun 07 2016(Updated: )
Don't try to handle a "previous" image in the JNG decoder. CVE assignment: <a href="http://seclists.org/oss-sec/2016/q2/459">http://seclists.org/oss-sec/2016/q2/459</a> Upstream patch: <a href="https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=f4ece8c7c462c5449138f39401f66318b9ab0430">https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=f4ece8c7c462c5449138f39401f66318b9ab0430</a>
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
SUSE Studio Onsite | =1.3 | |
openSUSE | =13.2 | |
openSUSE Leap | =42.1 | |
SUSE Linux Enterprise Debuginfo | =11.0-sp4 | |
SUSE Linux Enterprise Desktop | =12.0-sp1 | |
SUSE Linux Enterprise Server | =11.0-sp4 | |
SUSE Linux Enterprise Server | =12.0-sp1 | |
SUSE Linux Enterprise Software Development Kit | =11.0-sp4 | |
SUSE Linux Enterprise Software Development Kit | =12.0-sp1 | |
SUSE Linux Enterprise Workstation Extension | =12.0-sp1 | |
Ubuntu | =12.04 | |
Ubuntu | =14.04 | |
Ubuntu | =16.04 | |
Ubuntu | =16.10 | |
ImageMagick | =6.8.8-9 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-9847 is classified as a moderate severity vulnerability.
To fix CVE-2014-9847, you should update ImageMagick to the latest patched version.
CVE-2014-9847 affects ImageMagick versions prior to 6.8.9-9.
CVE-2014-9847 impacts various platforms including openSUSE, Ubuntu, and SUSE Linux Enterprise products.
CVE-2014-9847 is a decoding vulnerability in the JNG decoder component of ImageMagick.