Imagemagick CVE-2014-8355 Out of Bounds Local Memory Corruption Vulnerability
BID:70839
Info
Imagemagick CVE-2014-8355 Out of Bounds Local Memory Corruption Vulnerability
| Bugtraq ID: | 70839 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2014-8355 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 11 2014 12:00AM |
| Updated: | May 12 2015 07:49PM |
| Credit: | Hanno Boeck |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Imagemagick CVE-2014-8355 Out of Bounds Local Memory Corruption Vulnerability
Imagemagick is prone to a local memory-corruption vulnerability.
Attackers can exploit this issue to gain access to sensitive information or execute arbitrary code within the context of the user running the affected application. Failed exploit attempts will likely cause denial-of-service conditions.
Imagemagick is prone to a local memory-corruption vulnerability.
Attackers can exploit this issue to gain access to sensitive information or execute arbitrary code within the context of the user running the affected application. Failed exploit attempts will likely cause denial-of-service conditions.
Exploit / POC
Imagemagick CVE-2014-8355 Out of Bounds Local Memory Corruption Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Imagemagick CVE-2014-8355 Out of Bounds Local Memory Corruption Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
-
Mandriva imagemagick-6.7.5.10-3.2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva imagemagick-desktop-6.7.5.10-3.2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva imagemagick-doc-6.7.5.10-3.2.mbs1.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64magick-devel-6.7.5.10-3.2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64magick5-6.7.5.10-3.2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva perl-Image-Magick-6.7.5.10-3.2.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/
References
Imagemagick CVE-2014-8355 Out of Bounds Local Memory Corruption Vulnerability
References:
References:
- Bug 1158523 - (CVE-2014-8355) CVE-2014-8355 ImageMagick: out-of-bounds memory ac (Red Hat Bugzilla)
- ImageMagick Homepage (ImageMagick)
- imagemagick-6.8.9.9 multiple out-of-bounds memory access issues (CVE-2014-8354, (Hanno Boeck)
- Potential DOS and a few other bug: (Imagemagick)