ImageMagick PSD Image File Processing 'DecodePSDPixels()' Function Buffer Overflow Vulnerability

Bugtraq ID:	65563
Class:	Boundary Condition Error
CVE:	CVE-2014-1958
Remote:	Yes
Local:	No
Published:	Feb 14 2014 12:00AM
Updated:	Apr 13 2015 09:54PM
Credit:	Reported by the vendor.
Vulnerable:	Ubuntu Ubuntu Linux 13.10 Ubuntu Ubuntu Linux 12.10 Ubuntu Ubuntu Linux 12.04 LTS Oracle Solaris 11.2 ImageMagick ImageMagick 6.8.8-4
Not Vulnerable:	ImageMagick ImageMagick 6.8.8-5

ImageMagick PSD Image File Processing 'DecodePSDPixels()' Function Buffer Overflow Vulnerability

ImageMagick is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the user running the application. Failed exploit attempts will likely result in denial-of-service conditions.

Versions prior to ImageMagick 6.8.8-5 are vulnerable.

ImageMagick PSD Image File Processing 'DecodePSDPixels()' Function Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ImageMagick PSD Image File Processing 'DecodePSDPixels()' Function Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

ImageMagick PSD Image File Processing 'DecodePSDPixels()' Function Buffer Overflow Vulnerability

References:

• Changeset 14801 (dirk)
  
• ImageMagick ChangeLog (ImageMagick)
  
• ImageMagick Homepage (ImageMagick)
  
• Multiple Buffer Errors vulnerabilities in ImageMagick (Oracle)
  
• USN-2132-1: ImageMagick vulnerabilities (Ubuntu)
  
• Version 6.8.8 of ImageMagick (ImageMagick )