ImageMagick PSD Image File Handling CVE-2014-1947 Remote Buffer Overflow Vulnerability

Bugtraq ID:	65683
Class:	Boundary Condition Error
CVE:	CVE-2014-1947
Remote:	Yes
Local:	No
Published:	Feb 19 2014 12:00AM
Updated:	Mar 19 2015 08:13AM
Credit:	Justin Grant
Vulnerable:	Gentoo Linux
Not Vulnerable:

ImageMagick PSD Image File Handling CVE-2014-1947 Remote Buffer Overflow Vulnerability

ImageMagick is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the user running the application. Failed exploit attempts will likely result in denial-of-service conditions.

ImageMagick 6.5.4 is vulnerable; other versions may also be affected.

ImageMagick PSD Image File Handling CVE-2014-1947 Remote Buffer Overflow Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/65683.pl

ImageMagick PSD Image File Handling CVE-2014-1947 Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

ImageMagick PSD Image File Handling CVE-2014-1947 Remote Buffer Overflow Vulnerability

References:

• ImageMagick ChangeLog (ImageMagick)
  
• ImageMagick Homepage (ImageMagick)