CVE-2014-9852: Critical severity ImageMagick ImageMagick vulnerability
distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors.
Other sources
In cache fix usage of object after it has been destroyed.
CVE assignment:
http://seclists.org/oss-sec/2016/q2/459
Upstream patch:
https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=37ec7d53dcb99fbd1f5c33442594d5e279630563
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9852?
CVE-2014-9852 has a critical severity level as it can allow remote attackers to exploit the vulnerability due to the mishandling of destroyed objects.
How do I fix CVE-2014-9852?
To fix CVE-2014-9852, update ImageMagick to version 6.9.4-0 or later to ensure the preventive measures against this vulnerability are in place.
What versions of ImageMagick are affected by CVE-2014-9852?
CVE-2014-9852 affects ImageMagick versions prior to 6.9.4-0.
What impacts could result from CVE-2014-9852 exploitation?
Exploitation of CVE-2014-9852 could lead to remote code execution or other unspecified impacts, compromising system integrity.
Is CVE-2014-9852 present in openSUSE distributions?
Yes, CVE-2014-9852 is present in specific versions of openSUSE, including 13.2 and Leap 42.1.