PT-2020-7615
CVE-2014-1947
·
تاريخ النشر
2014-03-12
·
تاريخ التحديث
2020-02-21
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ImageMagick versions 6.5.4 and earlier
Description
A stack-based buffer overflow issue exists in the WritePSDImage function, located in coders/psd.c, which can be triggered by a PSD image containing a large number of layers. This issue may lead to a denial of service (crash) and potentially allow the execution of arbitrary code, involving the
L%02ld string.Recommendations
For ImageMagick versions 6.5.4 and earlier, update to a version later than 6.5.4 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾