| Vulnerability Name: | CVE-2014-1958 (CCN-91323) | ||||||||||||||||||||
| Assigned: | 2014-02-20 | ||||||||||||||||||||
| Published: | 2014-02-20 | ||||||||||||||||||||
| Updated: | 2020-02-12 | ||||||||||||||||||||
| Summary: | Buffer overflow in the DecodePSDPixels function in coders/psd.c in ImageMagick before 6.8.8-5 might allow remote attackers to execute arbitrary code via a crafted PSD image, involving the L%06ld string, a different vulnerability than CVE-2014-2030. | ||||||||||||||||||||
| CVSS v3 Severity: | 8.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
| ||||||||||||||||||||
| CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P) 5.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||||||||||||||
| Vulnerability Type: | CWE-120 | ||||||||||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2014-1958 Source: CONFIRM Type: Mailing List, Third Party Advisory http://lists.opensuse.org/opensuse-updates/2014-03/msg00032.html Source: CONFIRM Type: Mailing List, Third Party Advisory http://lists.opensuse.org/opensuse-updates/2014-03/msg00039.html Source: CCN Type: SA56844 ImageMagick PSD Images Processing RLE Decoding Buffer Overflow Vulnerability Source: CONFIRM Type: Broken Link http://trac.imagemagick.org/changeset/14801 Source: CONFIRM Type: Third Party Advisory http://ubuntu.com/usn/usn-2132-1 Source: CCN Type: ImageMagick Web site Introduction to ImageMagick Source: MISC Type: Mailing List, Third Party Advisory http://www.openwall.com/lists/oss-security/2014/02/13/2 Source: MISC Type: Mailing List, Third Party Advisory http://www.openwall.com/lists/oss-security/2014/02/13/5 Source: CCN Type: BID-65563 ImageMagick PSD Image File Processing 'DecodePSDPixels()' Function Buffer Overflow Vulnerability Source: CCN Type: Red Hat Bugzilla Bug 1067276 CVE-2014-1958 ImageMagick: buffer overflow flaw when handling PSD images that use RLE encoding Source: XF Type: UNKNOWN imagemagick-cve20141958-bo(91323) Source: MISC Type: Mailing List, Third Party Advisory https://www.openwall.com/lists/oss-security/2014/02/19/13 | ||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration 3:  Denotes that component is vulnerable | ||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||
| |||||||||||||||||||||
| BACK | |||||||||||||||||||||