The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Buffer overflow in the DecodePSDPixels function in coders/psd.c in ImageMagick before 6.8.8-5 might allow remote attackers to execute arbitrary code via a crafted PSD image, involving the L%06ld string, a different vulnerability than CVE-2014-2030.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Feb 6, 2020 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | May 29, 2017 |
| Suse | — | Upgrade libMagickWand-6_Q16-1-debuginfo-32bitUpgrade libMagickCore-6_Q16-1Upgrade libMagickCore-6_Q16-1-debuginfo-32bitUpgrade libMagickWand-6_Q16-1-debuginfoUpgrade libMagickCore5-debuginfo-32bitUpgrade ImageMagick-extraUpgrade libMagickWand5Upgrade libMagick++-develUpgrade ImageMagick-develUpgrade ImageMagick-debuginfoUpgrade libMagickCore-6_Q16-1-debuginfoUpgrade libMagickWand5-32bitUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickWand5-debuginfoUpgrade libMagickWand-6_Q16-1Upgrade libMagickCore5-debuginfoUpgrade perl-PerlMagick-debuginfoUpgrade libmagick-devel-32bitUpgrade perl-PerlMagickUpgrade libMagick++-6_Q16-2Upgrade ImageMagick-docUpgrade ImageMagick-debugsourceUpgrade libMagick++-6_Q16-2-32bitUpgrade libMagick++-6_Q16-2-debuginfo-32bitUpgrade libMagickCore5Upgrade libMagickCore5-32bitUpgrade ImageMagick-extra-debuginfoUpgrade libMagick++5Upgrade ImageMagickUpgrade libMagickWand-6_Q16-1-32bitUpgrade libMagick++5-debuginfoUpgrade libMagick++-6_Q16-2-debuginfoUpgrade libMagickWand5-debuginfo-32bitUpgrade imagemagick-devel-32bit | Dec 18, 2015 | Mar 6, 2014 |
| Ubuntu | — | Upgrade libmagickcore5Upgrade libmagick++5Upgrade libmagick++4Upgrade libmagickcore4 | Nov 8, 2024 | Feb 6, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub